{"id":457393,"url":"https://alion.io/job/northern-data-group-information-security-engineer-mfd","title":"Information Security Engineer (m/f/d)","company":{"id":175758,"name":"Northern Data Group","domain":"northerndata.de","url":"https://alion.io/company/northern-data-group","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Frankfurt am Main, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":83000,"max_usd":157000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":16},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Confluence","optional":false},{"name":"DLP","optional":false},{"name":"GDPR","optional":false},{"name":"Jira","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"DNS","optional":true},{"name":"HPC","optional":true},{"name":"IAM","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"TCP/IP","optional":true}],"status":"live","first_seen_at":"2026-08-24T00:00:00Z","employer_posted_date":"2026-08-24","last_verified_at":"2026-11-05T03:02:12Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"Job Description\nThe Information Security Engineer supports the Information Security function by delivering governance, and operational security services across the organization. The role is responsible for maintaining the Information Security Management System (ISMS), coordinating security governance and documentation, supporting audit activities, managing security-related projects, and assisting with the implementation and operation of securitAy controls and technologies. The position works closely with Compliance, IT, Engineering, Legal, HR and business stakeholders to strengthen the organization’s overall security posture.\nYOUR RESPONSIBILITIES:\nInformation Security Governance (Approx. 60%)\nMaintain and support the continual improvement of the ISO/IEC 27001 Information Security Management System (ISMS).\nOwn the lifecycle of security policies, standards, procedures and guidelines, including drafting, review cycles, approvals and publication via SharePoint and Confluence.\nAdminister Information Security documentation repositories, knowledge bases and workflow platforms (SharePoint, Confluence, Jira), including version control, review schedules and follow-up on overdue actions.\nOwn and maintain Information Security registers, including the Asset Register, Risk Register, Exception Register and Action Tracker, ensuring data quality and timely updates.\nSupport enterprise information asset management and data classification, including governance of data loss prevention (DLP) and sensitivity labelling technologies.\nLead audit preparation, evidence collection and logistics for internal and external audits; track findings, observations and corrective actions through to closure.\nSupport Information Security risk assessments, treatment plans and periodic reviews across the business.\nPrepare Information Security metrics, dashboards, KPIs and management reports.\nCoordinate Information Security projects, tracking scope, milestones, risks, dependencies, actions and deliverables.\nPartner closely with Compliance, Legal, IT, Engineering, HR and business stakeholders on governance matters.\nOperational Security Support (Approx. 40%)\nSupport the implementation, configuration, administration and continuous improvement of Information Security technologies and platforms.\nSupport third-party security assessments, due diligence questionnaires and supplier assurance activities.\nSupport vulnerability remediation tracking, escalating overdue items and reporting on remediation progress.\nSupport security incident response activities, including documentation, coordination, evidence collection and post-incident improvement actions.\nSupport security awareness and communication initiatives.\nSupport security reporting, KPI tracking and management updates.\nProvide coordination and administrative support to other Information Security team members.\nYOUR QUALIFICATIONS:\nBachelor’s degree in information security, Cyber Security, Computer Science or related discipline.\n5-7 years' experience in Information Security, GRC, Security Operations.\nSolid understanding of ISMS and security governance frameworks (e.g. ISO/IEC 27001).\nExperience with risk management methodologies and conducting information security risk assessments.\nFamiliarity with security compliance frameworks and regulatory requirements (e.g. NIS2, SOC 2, CIS Controls, GDPR).\nExperience managing documentation, registers and workflows across enterprise collaboration platforms (e.g. SharePoint, Confluence, Jira).\nExperience with Data Loss Prevention (DLP), information protection, and data classification solutions.\nExperience with data analysis, reporting, dashboard development and KPI measurement.\nExperience working in cross-functional environments with Infrastructure, IT, Platform Engineering, Compliance and Legal teams.\nFamiliarity with Vulnerability management processes and vulnerability assessment tools. Security testing methodologies and tools (e.g. vulnerability scanning, security validation, or penetration testing support).\nFamiliarity with Security monitoring, SIEM platforms, and incident detection concepts.\nFamiliarity with Endpoint Detection and Response (EDR) and endpoint security technologies.\nNice to have\nBasic Understanding of Identity and Access Management (IAM), authentication, and privileged access management concepts.\nBasic understanding of networking, TCP/IP, DNS, routing, switching, and network security principles.\nBasic understanding of web technologies and web application security concepts.\nBasic Understanding of Cloud security concepts and shared responsibility models.\nScripting or automation fundamentals (e.g. PowerShell or Python) would be advantageous.\n.\nWHAT WE OFFER\nWith us, you will work towards the future of HPC: From new, sustainable building methods for data centers to cooling concepts to software solutions for accelerated compute.\nYour approaches count: In official exchange formats or spontaneously at the coffee machine. At Northern Data, it's the best idea that counts - not the hierarchy. We’re looking forward to getting your inputs!\nYou make the difference in the company: Unlike in established corporations, at Northern Data you will really help shape things. From implementing new departments, to optimizing processes and culture.\nBest-in-class partners: The best work with Northern Data. This means a knowledge and time advantage from which your career and our customers benefit equally.\nGreen by heart: Sustainability is at the core of Northern Data. With us, you actively work on the carbon neutrality of datacenters worldwide. Beginning with our infrastructure and continuing with the solutions for our clients, we work towards a green future.\nHome Office facts: Work with our international and virtual team flexible from home. And of course, your hardware wishes will be fulfilled to make your ideas for next level HPC come true.\nYour wellness matters: At Northern Data we have regularwellbeinginitiatives that are designed to promote wellness, diversity, inclusion, and much more, ensuring a supportive and enriching environment for our global team.","description_format":"text","description_chars":6105,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Home office"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["AI Compute & Inference","High-Performance Computing"],"lifecycle":[{"event":"open","at":"2026-09-06T10:01:26Z"}],"visa":[],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.527,"p_room":0.28,"age_days":73,"expected_fill_days":29,"reasons":["conf:2","win:tail","crowd:"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/northern-data-group-information-security-engineer-mfd","json_url":"https://alion.io/job/northern-data-group-information-security-engineer-mfd.json","meta":{"generated_at":"2026-11-05T09:53:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12596,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175758},"rest":"https://alion.io/mcp/rest/get_company?id=175758"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnorthern-data-group-information-security-engineer-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnorthern-data-group-information-security-engineer-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnorthern-data-group-information-security-engineer-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/northern-data-group-information-security-engineer-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnorthern-data-group-information-security-engineer-mfd"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":457393}},{"tool":"search_jobs","arguments":{"company":"northerndata.de","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":457393},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}