INFORMATION SECURITY MANAGEMENT SPECIALIST H/F - 525191

Hello World, We are hiring!

We empower our people to stay resilient and relevant in a constantly changing world. We're looking for people who are always searching for creative ways to grow and learn. People who want to make a real impact, now and in the future.

Does that sound like you? Then it seems like you'd make a great addition to our vibrant team.

Siemens Software, a business unit of the Siemens Digital Industries, is a leading global provider of software solutions to drive the digital transformation of industry, creating new opportunities for manufacturers to realize innovation.

About this Role:

We are looking for an Information Security Management Specialist to make ISO 27001 compliance part of our simulation software teams' daily habits—not just a tick-box exercise.

In this role, you will translate Annex A controls into practical engineering practices, help teams produce documentation that genuinely reflects how they work, and ensure the evidence behind every control is complete, current, and easy for an auditor to verify.

• Reports to: Head of Quality and Information Security Management, SIM Business Segment
• Works with: ISMS Owners, Asset Owners, Asset Managers, DevOps, Product and Solution Security Experts, Project Managers, and Supplier Management

Sitting between the Information Security Management System (ISMS) owners and product development teams, you will serve as the local point of contact for information security compliance across SIM. The role is hands-on and advisory: part control expert, part technical writer, and part coach.

What You'll Be Doing

ISO 27001 Control Guidance

• Interpret ISO/IEC 27001:2022 Annex A controls for software teams onboarding to the certificate, with a particular focus on technological controls (A.8)—including secure development life cycle, secure coding, security testing, change management, incident management, and separation of environments (development, test, and production).
• Map controls to existing engineering workflows so compliance is embedded directly into everyday processes and tooling.

Documentation

• Partner with teams to write and maintain clear, concise procedures and work instructions that support secure development and satisfy both Siemens Digital Industries Software policies and the ISO standard.
• Produce templates and reference examples that make good documentation the easiest path to take.
• Facilitate regular reviews so documents remain current, version-controlled, and consistent with real-world practice.

Evidence and Audit Readiness

• Define what good, objective evidence looks like for each relevant control and establish where it lives.
• Help teams automate evidence collection from source control, CI/CD pipelines, security scanners, and cloud platforms wherever possible.
• Run internal evidence reviews, tracking gaps and nonconformities through to resolution.
• Support external certification and surveillance audits, including preparing evidence packs and accompanying engineering teams during auditor sessions.

Risk and Continuous Improvement

• Contribute to information security risk assessments for products and services, helping teams own and implement treatment plans.
• Track corrective actions and feed insights from audits, six-monthly management reviews, and incidents back into engineering workflows.
• Deliver engaging awareness sessions and practical training on secure development and ISMS requirements for developers.

What You'll Bring

Essential Skills & Experience

• Significative experience in information security, governance, risk, and compliance (GRC), or security assurance.
• Practical understanding of the software development life cycle (SDLC): version control, code review, CI/CD pipelines, automated testing, and release management.
• Solid working knowledge of ISO/IEC 27001, specifically the 2022 Annex A control set.
• Hands-on experience preparing for or supporting ISO 27001 certification or surveillance audits.
• Strong critical eye for audit evidence—able to evaluate whether artifacts are sufficient, objective, and traceable, and explain gaps without unnecessary jargon.
• Excellent technical writing ability: capable of producing structured, concise documentation engineers will actually read and use.

Desirable Skills & Qualifications

• ISO/IEC 27001 Lead Implementer or Lead Auditor certification.
• Familiarity with adjacent frameworks and standards (e.g., SOC 2, Cyber Essentials Plus, NIST CSF, OWASP SAMM/ASVS).
• Experience with compliance automation platforms and evidence gathering from tools such as GitHub/GitLab, Jira, SAST/DAST scanners, and AWS/Azure.
• Understanding of secure design practices, such as threat modelling and Software Bill of Materials (SBOM) management.
• An interest in emerging areas like AI governance and ISO/IEC 42001.

Personal Attributes

• Collaborative: Earns trust with engineers by understanding practical delivery constraints and offering pragmatic solutions, not just audit findings.
• Structured: Organises complex documentation sets into clean, logical hierarchies.
• Detail-oriented: Detects weak, missing, or ambiguous evidence well before an auditor does.
• Clear communicator: Comfortable translating technical security requirements for developers and synthesising compliance posture for leadership.
• Self-directed & curious: Manages work across multiple teams independently, keeps projects moving, and brings an appetite to continuously learn.

Working at Siemens Software

A collection of over 377,000 minds building the future one day at a time in over 200 countries. We're dedicated to equality, and we welcome applications that reflect the diversity of the communities we work in. All employment decisions at Siemens are based on qualifications, merit, and business need. Bring your curiosity and creativity and help us shape tomorrow.

Siemens is not the same manufacturing company as in the past. We are helping our customers get to tomorrow faster through innovation and digitalization and are transforming alongside them. We are a modern, forward-looking software company, with the opportunities of a large corporation, where your opportunities are endless. The role you apply for today is only the first step in your Siemens journey.

Compensation & Benefits

The primary location for this opportunity is Romania, UK, France and Greece. The applicable salary range for these locations is:

EUR 45,800 - EUR 78,000 (France)

GPB 44,200- GPB 68,800 (UK)

RON 145,300- RON 276,000 (Romania)

EUR 26,300 - EUR 52,600 (Greece)

This role is eligible to earn incentive compensation. The actual compensation offered is based on the successful candidate's job-related skills, experience, and relevant education/training. Siemens offers health and wellness benefits to employees; you can access the benefits available in your country via the link: https://jobs.sw.siemens.com/benefits/

This position may also be posted in additional locations beyond those specified above. For such locations, the applicable salary ranges and benefits will be disclosed by the Talent Acquisition Partner at the time of initial contact, in accordance with local legal requirements.

Diversity & Inclusion

We value equal opportunities and welcome applications from all candidates. At Siemens, we believe people who've had real experiences dealing with being different will excel as leaders. Let's foster a culture of creativity and innovation. We will ensure that individuals with disabilities are provided with reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Siemens. Making real what matters

If you want to make a difference - make it with us!

#DISWSIM

#LI-Hybrid