Stellenticket Humboldt-Universität zu Berlin

• ISMS Development: Support the setup, structuring, and maintenance of our ISO 27001-compliant information security management system — as a coordinating and documenting function in close exchange with management, IT, HR, legal, and data protection.

• Requirements Analysis: Break down ISO 27001 controls, identify gaps, assign responsibilities, and track required evidence.

• Documentation: Create, revise, and maintain policies, process descriptions, work instructions, checklists, and audit evidence documents.

• Audit Preparation: Compile and organize audit materials; ensure all required evidence is in place and traceable.

• Task Tracking: Maintain an up-to-date action and task plan including status, owners, deadlines, and open items.

• Risk Management: Assist with gap analyses, risk assessments, and documenting risk treatment measures.

• Cross-Team Coordination: Gather information and coordinate with IT, HR, legal, data protection, management, and relevant departments.

• Process Documentation: Document security processes such as access management, change management, incident management, backup, vendor management, asset management, and awareness programs.

• Follow-Through: Track and close open points from internal reviews, external consultations, audits, and management decisions.

• Stakeholder Communication: Prepare clear decision bases and summaries for management and business units.

• Foundation: Degree/ background in business law, IT law, business informatics, compliance, quality management, or a related field — or a relevant lateral entry from data protection, audit support, or process management.

• Compliance mindset: Ability to read, understand, and translate requirements from standards, contracts, and regulations into tasks and documentation.

• Security interest: First exposure to ISO 27001, information security, data protection, or audit processes is a plus

• IT fluency: You don’t need to be a sysadmin, but you understand basic IT and security concepts such as user and access management, cloud systems, backup, change management, and incident management, and communicate confidently with technical colleagues.

• Writing strength: Excellent written German and English; able to document complex topics clearly, precisely, and in an audit-ready way.

• Structure: Systematic, thorough, and reliable — you keep track of open points, deadlines, and responsibilities without being prompted.

• Collaboration: Professional and clear communicator with management, IT, legal, HR, and data protection stakeholders.

• Discretion: High sense of responsibility when handling sensitive information.
  Tools: Experience with tools such as Confluence, Jira, SharePoint, Notion, Excel, or GRC tools is a benefit.

• Regulatory knowledge: Basic knowledge of GDPR, IT law, data protection law, or contract review is a plus

• Industry background: Experience in a software, SaaS, or IT-oriented company is an advantage.

• Employment Eligibility: Must be legally authorized to in Germany.

• Balance: No weekend work, no shifts, no overtime.
• Appreciation: Fair pay and a safe working environment.
• Flexibility: Work remotely and from our modern Berlin office – 3 days/week in the office required.
• Understanding: Many of us come from the hotel industry ourselves.
• Purpose: Help hotels around the world stay economically successful.
• Sustainability: Our offices are eco-friendly and perfectly connected.
• Mobility: We subsidize your Deutschlandticket.
• Growth: Through team events and personal development – we support what makes you unique.

Ready to Join Us?

Send us your CV – feel free to include your earliest possible start date. If you have any questions, reach out to us at hr@fairmas.com – we’re happy to help.

You don’t meet every single requirement or have gaps in your resume? No problem!
Apply anyway – what matters most to us are your motivation, values, and personality.