Auditor Cybersecurity & Information Security

DEKRA Certification is looking for an auditor for cybersecurity and information security. The position can be filled anywhere in Germany.

• Planning, preparing and independently carrying out certification and surveillance audits according to ISO/IEC 27001, TISAX® (ENX), KRITIS/BSI IT-Grundschutz and other cybersecurity standards – on site and remote
• Creating compliant, clearly structured audit reports (DE/EN) with practical advice that really helps customers
• Ensuring audit processes follow DAkkS accreditation requirements and the respective standard requirements
• Contributing to building team competence: helping onboard new auditors and develop audit methods
• Technical support for sales and actively maintaining long-term customer relationships
• Optional: Helping develop our own DEKRA standard

• University degree in computer science, information security or a comparable STEM/IT degree, alternatively a technician or master craftsman qualification at DQR level 6
• At least 4 years of proven professional experience in IT/information security – e.g. as ISO, CISO, IT security analyst or in a comparable role
• Sound knowledge in designing or operating an ISMS according to ISO/IEC 27001 and TISAX
• Fluent German and good English skills (audit reports in both languages)
• Willingness to travel about 50–70% (audit sites across Germany, occasionally international)
• Advantage: Existing auditor approval for ISO 27001 at an accredited certification body (if you don't have it, you will acquire it with us in a structured way on the job)
• Advantage: Experience in the automotive industry or with KRITIS-regulated environments
• Advantage: Additional certifications: CISA, CISM, CISSP or comparable