Senior Information Security Manager

About the role

Jungheinrich, with over 30 years of experience in software and digital products for intralogistics, is looking for a Senior Information Security Manager in Zagreb. You will play an active role in operating and continuously improving the Group's certified Information Security Management System (ISMS).

Key responsibilities

• Operate, maintain and develop the ISMS in line with ISO/IEC 27001 and other applicable requirements.
• Own assigned ISMS topics and drive them independently from analysis through implementation and follow-up.
• Develop tool-based information security risk management and carry out risk assessments with stakeholders.
• Support the implementation of legal, regulatory, contractual and internal information security requirements.
• Coordinate certification and assurance framework activities, including TISAX.
• Maintain information security policies, standards, procedures and supporting documentation.
• Plan and support internal and external audits, assessments, certifications and effectiveness reviews.
• Lead or contribute to information security projects and international workstreams.
• Advise business and IT departments on security requirements, risks and solutions, and support supplier security risk assessment.
• Work closely with IT, Risk, Compliance, Data Protection, Procurement and other functions.

Required profile

• Bachelor's or Master's degree in Computer Science, Information Security, Business Administration, Risk Management or a related field.
• Several years of professional experience in information security or a comparable role.
• Practical experience operating, maintaining and developing an ISMS.
• Strong sense of ownership and ability to drive topics independently.
• Excellent written and spoken English; German is a plus.
• Willingness to travel when required.

Required skills

• Sound knowledge of ISO/IEC 27001, information security governance, risk management and compliance.
• Experience with information security risk assessments, audits or certifications.
• Understanding of legal requirements such as the EU NIS2 Directive.
• Relevant certifications such as CISM, CISSP, ISO/IEC 27001 Lead Implementer or Lead Auditor are an advantage; TISAX experience is an advantage but not required.

What we offer

• Attractive salary depending on qualifications and experience.
• Flexible working hours and the option of working from home.
• Language courses, health and recreation benefits, family incentives.
• Free healthy snacks and coffee in the new Zagreb office, and lots of internal events.
• Professional and personal training opportunities.