> Markdown version of [/jobs/ext/1601047-information-security-assurance-expert-all-genders](https://www.wearedevelopers.com/jobs/ext/1601047-information-security-assurance-expert-all-genders). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Assurance Expert (all genders)

- **Company:** METRO AG
- **Location:** Düsseldorf, Germany
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Cyber Security, Document Management Systems, Information Technology
- **Published:** July 3, 2026
- **Apply:** https://de.indeed.com/viewjob?jk=3c9cb90fdd8e4ad9

## About the Role

* Master's degree in Information Security, Computer Science, or a related field.
 * Minimum 3 years of experience in cybersecurity assurance, control assessment, or information security governance.
 * Professional certifications preferred (e.g. CISA, CRISC, ISO 27001 / 42001 Lead Auditor, ISO 27001 / 42001 Lead Implementer, CISSP).
 * Solid understanding of cybersecurity controls, governance frameworks, and assurance and assessment methodologies.
 * Familiarity with regulatory and compliance requirements (e.g. ISO/IEC 27001, NIS 2, GDPR, EU AI Act).
 * Strong communication and reporting skills, with the ability to explain technical issues to non-technical stakeholders.
 * Experience working in complex, multinational environments is a plus.
 * Fluent English required; additional languages are a plus.

## Description

To plan, execute, and support independent information security assurance activities across METRO AG and its operating entities. The role provides structured, judgment-driven assessment of the effectiveness, maturity, and alignment of security controls against internal policies, regulatory requirements, and recognized frameworks - enabling informed risk decisions and continuous improvement of the organization's security posture., * Plan and perform information security assurance reviews, including control design and effectiveness assessments, thematic reviews, and targeted evaluations across IT and OT environments.

 * Assess the design adequacy and operational effectiveness of security controls based on frameworks such as ISO/IEC 27001, ISO/IEC 42001, the NIST Cybersecurity Framework and the NIST AI Risk Management Framework.
 * Identify and document control gaps, non-conformities, and risk exposures with proportionate, actionable recommendations.
 * Provide subject-matter support to internal and external audit functions as required.
 * Collaborate with risk, compliance, and IT teams to track remediation of identified control gaps and ensure timely closure.
 * Prepare clear, concise, and well-evidenced assurance reports and recommendations for senior stakeholders.
 * Provide guidance to entities and departments in preparing for assurance assessments and building control maturity.
 * Support the continuous improvement of the IS assurance program, including methodology, tooling, and automation.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Edit Your Future: Queerverse Radical AI](https://www.wearedevelopers.com/videos/909-edit-your-future-queerverse-radical-ai)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [WWC24 - Chris Wysopal, Helmut Reisinger and Johannes Steger - Fighting Digital Threats in the Age of AI](https://www.wearedevelopers.com/videos/926-wwc24-chris-wysopal-helmut-reisinger-and-johannes-steger-fighting-digital-threats-in-the-age-of-ai)

## Related Articles

- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Jobs in Germany for Americans](https://www.wearedevelopers.com/magazine/423-jobs-in-germany-for-americans)
- [Data Analyst Salary Germany](https://www.wearedevelopers.com/magazine/277-data-analyst-salary-germany)