Manager IT Security & Operations (m/f/d)

You own, further develop, and maintain OMMAX’s Information Security Management System (ISMS), ensuring ongoing ISO 27001 compliance and successful recertification cycles.

You strengthen the company’s IT security posture across Microsoft 365 and Azure, including Defender, Intune, Purview, identity & access management, and conditional access policies.

You manage key security processes such as risk assessments, patch and vulnerability management, incident response, and continuous security monitoring.

You develop, update, and communicate IT security policies, standards, guidelines, and documentation in close alignment with legal and compliance teams.

You conduct vendor, SaaS, and tool security assessments to ensure appropriate safeguards across our software and cloud ecosystem.

You plan, coordinate, and deliver security awareness initiatives, including training programs, internal campaigns, and phishing simulations.

You serve as the internal point of contact for all security-related questions, incidents, and escalations, ensuring structured communication and remediation.

You contribute actively to daily IT operations, supporting user and device lifecycle management, endpoint administration, and troubleshooting escalations.

You support IT procurement, vendor management, and SaaS lifecycle management in coordination with the internal IT team.

You collaborate closely with IT team members to guide, standardize, and further develop operational and security best practices.

You continuously identify opportunities to improve IT processes, service quality, system reliability, and overall security maturity.

You bring five or more years of professional experience in IT security, IT operations, or a hybrid role that combines both domains.

You have proven experience with ISO 27001, ideally in maintaining or managing an ISMS or leading successful recertification cycles.

You possess strong technical knowledge of Microsoft 365 and Azure security tools, including Defender, Intune, Purview, Conditional Access, and identity & access management.

You have solid expertise in SaaS security, security governance, policy frameworks, and vendor or tool security assessments.

You bring a hands-on mindset and feel comfortable switching between strategic security topics and operational IT tasks.

You have experience with incident monitoring, incident response, and interpreting security alerts across cloud and SaaS environments.

You demonstrate strong collaboration skills and the ability to communicate security topics effectively to both technical and non-technical stakeholders.

Professional certifications such as ISO 27001 LI/LA, CISSP, CISM, or AZ-500 are highly welcomed, but not mandatory.

You are fluent in English, German language skills are a plus.

You are based in Munich or willing to work on-site at least three days per week in our Munich office.