IT Security Consultant (m/f/d)
As an IT Security Consultant (m/f/d), you lead the technical side of our consulting projects. They cover information security, ISMS rollouts and regulatory compliance. You work directly with client IT heads, executive boards and data protection officers. You turn standards (ISO 27001, BSI IT-Grundschutz, NIS2, DORA, TISAX) into clear, practical steps. And you guide our clients from the gap assessment all the way to a successful certification audit.
Your responsibilities
- ▸Run protection-needs, risk and gap analyses. You check against ISO/IEC 27001:2022, BSI IT-Grundschutz, NIS2 and sector standards (TISAX, B3S, DORA, German KRITIS regulation).
- ▸Build, maintain and run information security management systems (ISMS). This includes the policy cascade, awareness concepts, KPI systems and internal audits.
- ▸Help clients rank and put in place technical and organisational measures. This ranges from top-level policy to concrete hardening guides for M365, Active Directory or cloud workloads.
- ▸Support certification and surveillance audits (ISO 27001, TISAX, ISAE 3402). You are the technical contact for accredited certification bodies.
- ▸Write audit-ready security concepts and business continuity manuals (BCM/ITSCM per ISO 22301). You also draft cloud-security building blocks (M365, Azure, AWS, Google Cloud).
- ▸Review project results and mentor junior consultants on the project. You also add to our internal library of methods and templates.
Your profile
- ▸A degree in computer science, business informatics or IT security. A similar qualification with matching work experience is fine too.
- ▸At least three years of work in IT security or compliance consulting. Ideally you gained it at a consultancy or assurance firm.
- ▸Solid, hands-on knowledge of ISO/IEC 27001:2022 and/or BSI IT-Grundschutz. You also have a current overview of NIS2, DORA and GDPR.
- ▸Experience leading C-level workshops and writing audit-ready documents.
- ▸Strong German (at least C1) and good English (at least B2), spoken and written.
- ▸An EU driving licence (class B). You are willing to visit clients in DACH from time to time (approx. 20 %).
Nice to have
- ▸A current certification as ISO 27001 Lead Implementer/Auditor, CISSP, CISM, CISA, IT-Grundschutz-Praktiker or TISAX auditor.
- ▸Experience with sector standards: B3S for hospitals, TISAX in the car industry, BAIT/VAIT/KAIT/ZAIT in financial services.
- ▸Hands-on work with GRC tools (e.g. verinice, HiScout, ITQ, ServiceNow GRC) and cloud-security frameworks (CIS benchmarks, BSI C5).
- ▸Basic knowledge of pentesting, OT/ICS security or incident response. It helps you judge technical findings correctly.
What we offer
- ▸A permanent full-time contract (40 h/week). You get 30 days of annual leave and flexi-time without core hours.
- ▸A clear salary band of €65,000 to €95,000 gross p.a., based on your experience. On top, you get a 13th-month payment and a target bonus tied to performance.
- ▸A company car or a Deutschlandticket (your choice). Modern hardware (MacBook Pro or ThinkPad) and a fully equipped remote workstation.
- ▸A €4,000 training budget each year. Plus five extra paid training days and one paid certification exam per year.
- ▸Hybrid work with at most two office days per week in Wülfrath. You get a home-office allowance and can do a workation (up to 60 days per year within the EU).
- ▸A company pension with a 20 % employer share. Group accident insurance that also covers your private life, and EGYM Wellpass.
Our application process
From first contact to offer, it usually takes two to three weeks. There is no drawn-out assessment centre and no endless waiting.
Submit your application
Send us your CV and certificates. A short cover letter is optional. An email to HR@SecTepe.de is enough. We do not need a photo, a portfolio, or details on religion or marital status.
Initial conversation (45 min, remote)
We get to know each other and clarify what both sides expect. We talk about your technical focus and about typical projects at SecTepe.
Technical interview & case discussion
You and two senior colleagues work through a realistic consulting case. It is not a stress test. It is a technical talk, just like the ones we have every day.
Offer & onboarding
If it fits, you get a concrete offer within five business days at most. Onboarding follows a clear plan: a buddy programme, clear 30-60-90-day goals and a personal certification plan.
Sounds like you?
Send your CV and certificates toHR@SecTepe.de. A cover letter is welcome but not mandatory.
Apply now