Principal Consultant

A specialised consultancy is expanding its team of Information Security experts. This role is focused on delivering practical, regulatory driven security and risk projects, not high level strategy slides. You’ll work directly with clients across financial services, critical infrastructure and other regulated industries to help them manage IT risks and meet compliance expectations.Key Responsibilities:Lead or support client projects in information security, IT risk and compliance – covering planning, execution and reportingConduct gap analyses and support the implementation of requirements under DORA, NIS2, KRITIS, ISO 27001 or IT-GrundschutzEvaluate business and IT processes from a risk, efficiency and compliance perspectiveCoordinate cyber risk reduction programmes and security governance frameworksHelp clients integrate security into existing processes and IT landscapes, including areas like IAM, SIEM or third-party riskTranslate regulatory and technical requirements into structured, actionable plansBuild long-term relationships with clients and contribute to developing internal methods and service offeringsYour Profile:Several years of experience in information security, IT compliance or cyber risk – ideally within consulting or project-based environmentsDegree in IT, engineering, business IT or a related fieldStrong understanding of common frameworks and standards (e.g. ISO 27001, BSI 200-x, DORA, NIS2)Practical experience in analysing complex systems and explaining risks and controls clearlyVery good communication skills in both German and EnglishCertifications such as CISSP, CISM, CISA or ISO 27001 Lead Implementer are a plus, but not a must