Information Security Manager | Informationssicherheitsmanagerin / Informationssicherheitsmanager (w|m|d)

München Klinik

München, Bayern, Deutschland
Published Dec 17, 2025
Full-time
Permanent

Job Summary

This critical role involves managing and continuously improving the Information Security Management System (ISMS) within a large hospital network, which is classified as a critical infrastructure. The Information Security Manager will be responsible for strategic development, operational planning, and implementation of comprehensive security concepts across digital, physical, and organizational processes. Key tasks include steering ISMS risk management, conducting regular risk analyses, coordinating internal and external audits (including BSIG verification procedures), and managing security incidents. The role requires advising executive management on legal and regulatory compliance, developing organization-wide training programs to foster a security culture, and ensuring security requirements are met during procurement. This position offers the chance to actively strengthen the resilience of a major healthcare provider in Munich, working closely with IT Security and Data Protection departments.

Required Skills

Education

University degree (Bachelor or Master); ISO 27001 personnel certification (Information Security Officer or Auditor) or comparable qualification

Experience

  • At least three years of professional experience in either a clinical environment or in information security
  • Professional experience in planning, expanding, operating, and continuously improving ISMS
  • Experience in managing information security incidents and reportable events

Languages

Not specified

Additional

  • The position is located at the Munich Klinik Central Administration (Fritz-Erler-Straße) and is full-time (38.5 hours/week), though part-time is possible. It is an unlimited contract.