ISMS Security Manager: ISO27001 & Jira-Driven Governance

ppAs the operational owner of Alpitronic’s Information Security Management System (ISMS), you safeguard compliance with ISO27001 and additional security certifications by ensuring that risks, controls, policies and audit evidence are consistently translated into actionable, traceable work across our tooling ecosystem (IMS, Jira, Confluence). Your mission will be to keep the ISMS reliable, audit‑ready and seamlessly embedded into daily operations. /ppstrongYOUR RESPONSIBILITIES /strong /pulliOperate and maintain the ISMS, ensuring policies, controls, risks and evidence remain accurate, consistent and audit‑ready /liliTranslate risk assessments and treatment plans into structured, trackable work items in Jira, ensuring full traceability with IMS documentation /liliManage the lifecycle of security controls, including implementation, testing, remediation and exceptions /liliIntegrate the Information Security function into existing Jira/Confluence workflows, dashboards and templates /liliMaintain controlled security documentation in the IMS and support internal and external audits /liliCoordinate security intake processes, supplier assessments and access/asset governance activities /liliConnect vulnerability and incident outputs to the ISMS and ensure findings drive updates to risks, controls and procedures /liliProvide security guidance to engineering, IT and business teams, supported by live data and metrics /li /ulpstrongYOUR QUALIFICATIONS SKILLS /strong /pulliDegree in Information Security, Computer Science or similar, or 3+ years of hands‑on ISMS operational experience under ISO/IEC 27001 /liliProven ability to translate risk assessments into actionable, trackable work /liliStrong proficiency with Jira and Confluence (workflows, dashboards, automation, templates) /liliExperience with controlled-document systems (IMS/QMS) and formal document‑control processes /liliBroad understanding of key security domains (IAM, network, application, endpoint, vulnerability and incident management) /liliKnowledge of regulatory frameworks such as NIS2 and GDPR /liliCertifications such as CISM, ISO 27001 Lead Implementer or CRISC are a plus /liliStructured, evidence‑driven working style with strong written communication skills /liliAbility to influence without authority, combined with diplomacy and assertiveness /liliProactive, organised and collaborative mindset /liliFluent in English; German and/or Italian is a plus /li /ulpstrongOUR COMMITMENT /strong /pulliInnovative work environment in a young, dynamic team /liliHigh-tech projects in the future-proof sector of e-mobility /liliOpportunities for advancement in a growing company /liliA wide range of further training opportunities /liliAttractive bonus system and performance-related pay /liliAdditional company benefits /li /ul /p #J-18808-Ljbffr