Cybersecurity role profile

Hire an Information Security Officer

Coordinate information security practice — often close to the ISMS and business units

Our IT recruitment team combines IT executive search, specialist IT recruiters and scalable technology recruitment for security-critical hiring.

The information security officer supports implementation: advice, coordination and awareness — commonly under ISO/IEC 27001 and BSI ISMS practice. Definitions vary; distinction from the CISO depends on size and governance.

Typical themes: risk analyses, policy care, training and project guidance; audit evidence with the ISMS manager.

NIS2 can add reporting duties — close work with compliance.

Hiring favours communicative profiles with method depth — without confusing the role with executive CISO accountability.

Hire an Information Security Officer

Role profile

Purpose

Embed information security organisationally: advise, coordinate and grow awareness.

Typical accountability

ISMS contribution, risk and remediation coordination, training, business-facing support.

Example KPIs

• Training coverage
• response time for security questions
• coordinated remediation throughput

Responsibilities in detail

1. Advice and coordination

Support risk analyses and control selection using ISO/IEC 27002.

2. Awareness

Campaigns, phishing simulations, role-based materials.

3. ISMS contribution

Internal audits and management reviews; documentation hygiene.

4. Project support

Security input to procurement and projects; privacy alignment.

Interfaces

Internal

CISO/ISMS
business units
IT
privacy

External

auditors
training partners

Clear charters prevent the ISO role becoming a “substitute CISO— without mandate.

Qualifications

Professional

ISMS literacy
communication
process and project sense

Collaboration

Patience with business units
diplomacy
structure

Salary orientation (Germany)

Reference IT security officer benchmarks by scope and company size.

Hiring challenges

Heterogeneous definitions; threat dynamics demand fresh awareness content.

• Unclear mandate versus CISO.
• Understaffing with high advice demand.
• Measuring awareness impact is hard.

More role profiles

See the cybersecurity recruiting overview for all profiles — or jump to related roles:

• Hire an ISMS Manager
• Hire a CISO
• Hire a NIS2 Compliance Manager
• Hire a Cybersecurity & IT Security Consultant

We also fill roles in industrial IT recruitment — including OT/ICS security, manufacturing IT and industrial architecture.

Hire an information security officer

We clarify role boundaries and source candidates with ISMS strength and communication skills.

Explicit expectations on timelines and fee bands — no fuzzy metrics.

Find matching candidates