Information Security & Governance Specialist

This role is responsible for implementing and managing ISO 27001 and TISAX frameworks, maintaining the Information Security Management System (ISMS), coordinating security initiatives, and supporting contract and IT-related activities across multiple departments. The ideal candidate is proactive, technically confident, and capable of taking ownership of ISO-related projects while liaising with internal and external stakeholders., * Lead implementation, certification, and maintenance of ISO 27001

• Develop, implement, and maintain ISMS policies, procedures, and standards
• Conduct information security risk assessments and manage CAPA
• Prepare management review materials and reports; coordinate internal and external audits
• Lead TISAX compliance and renewal projects
• Maintain access control policies, user governance, and security awareness programs
• Review NDAs and DPAs; support compliance with data protection requirements
• Provide first-line IT support and escalate technical issues as needed
• Coordinate with suppliers, stakeholders, and cross-functional teams for continuous improvement

• Hands-on experience with ISMS frameworks (ISO 27001 and/or TISAX)
• Proven experience leading ISO certification activities
• Business-level English communication skills
• Proactive and capable of driving projects independently
• Strong communication and stakeholder management skills
• Technically confident, with willingness to learn new standards and technologies
• Growth mindset and eagerness to take on new challenges
• Knowledge of German and/or Japanese is advantageous but not required

Centre People Appointments Ltd. Industry and mechanical engineering Cologne, Germany