Company overview: dpa-IT Services GmbH is the IT backbone of Deutsche Presse-Agentur (dpa), one of the world’s leading independent news agencies. As a subsidiary of dpa, we oversee IT infrastructure, business-critical applications, modern cloud and data center environments, and digital workplaces for the entire dpa group.

Position: We are looking for an Information Security Manager (m/f/d) to join our team at our Hamburg site on a permanent full-time basis (38.5 hours).

What you will do: - Build and continuously develop our Information Security Management System (ISMS) according to ISO 27001, from policy creation to effectiveness evaluation of technical and organizational measures. - Identify and assess risks and new projects/technologies (software, SaaS, and AI solutions) from an information security perspective; analyze vulnerabilities, translate findings into concrete actions, and monitor implementation. - Plan and accompany security audits and penetration tests; handle security incidents and prepare incident response and crisis drills. - Proactively engage IT and development teams to design secure systems, networks, and cloud environments. - Provide cross-organizational recommendations up to management and executive levels. - Develop and manage awareness initiatives to strengthen security culture across the organization.

Your profile: - Degree in (business) informatics, IT security, or an equivalent qualification. - Practical experience building or operating an ISMS per ISO 27001. - Experience in risk analyses, audit preparation, and security assessments, possibly wi

Company overview: dpa-IT Services GmbH is the IT backbone of Deutsche Presse-Agentur (dpa), one of the world’s leading independent news agencies. As a subsidiary of dpa, we oversee IT infrastructure, business-critical applications, modern cloud and data center environments, and digital workplaces for the entire dpa group.

Position: We are looking for an Information Security Manager (m/f/d) to join our team at our Hamburg site on a permanent full-time basis (38.5 hours).

What you will do: - Build and continuously develop our Information Security Management System (ISMS) according to ISO 27001, from policy creation to effectiveness evaluation of technical and organizational measures. - Identify and assess risks and new projects/technologies (software, SaaS, and AI solutions) from an information security perspective; analyze vulnerabilities, translate findings into concrete actions, and monitor implementation. - Plan and accompany security audits and penetration tests; handle security incidents and prepare incident response and crisis drills. - Proactively engage IT and development teams to design secure systems, networks, and cloud environments. - Provide cross-organizational recommendations up to management and executive levels. - Develop and manage awareness initiatives to strengthen security culture across the organization.

Your profile: - Degree in (business) informatics, IT security, or an equivalent qualification. - Practical experience building or operating an ISMS per ISO 27001. - Experience in risk analyses, audit preparation, and security assessments, possibly wi