What we look for:

• You lead OMMAX’s security strategy and roadmap, acting as the primary advisor on security, compliance, and data protection matters across the organization.
• You own and continuously evolve the Information Security Management System (ISMS), ensuring ISO 27001 compliance, audit readiness, customer security responses, and successful recertifications.
• You strengthen security governance, policies, and risk management frameworks, including the review of contractual requirements, TOMs, and regulatory obligations.
• You develop and enhance the security architecture across Microsoft 365, Azure, and the SaaS landscape – covering identity, endpoint, data protection, and secure coding practices.
• You evaluate, implement, and manage security controls and vendor risks, leading tool assessments, vendor due diligence, and third-party security validations.
• You oversee threat detection, patch management, vulnerability management, and incident response, providing hands-on support for incidents and driving continuous improvement of defensive capabilities.
• You drive organization-wide security awareness, including training, communication, and phishing simulations to promote a strong security culture.
• You collaborate closely with IT, Legal, and cross-functional teams, ensuring operational practices align with security standards and supporting the resolution of security-related issues.

What we require:

• You have 7+ years of experience in security leadership, IT security, or a senior hybrid role (e.g. CISO, vCISO, Head of Security, Senior Security Manager).
• You demonstrate expertise in managing or scaling ISO 27001 programs, including ownership of recertification cycles.
• You have a strong architectural and operational understanding of Microsoft 365 and Azure security technologies (Defender, Entra ID, Intune, Purview, Conditional Access, Identity Security).
• You have experience steering security governance, risk frameworks, and compliance-driven programs.
• You have a proven track record in incident response, security monitoring, vulnerability management, and cloud security best practices.
• You are able to balance strategic leadership with hands-on execution when needed.
• You have excellent communication and stakeholder management skills, with the ability to influence both executive and operational teams.
• You hold or are pursuing professional certifications (CISSP, CISM, ISO 27001 LI/LA, AZ-500, CCSP, etc.), which are strongly welcomed.
• You are fluent in English; German is a plus.
• You are based in Munich and available 2–3 days per week onsite

What you can expect:

• Your impact is crucial: You actively shape the digital future in a highly motivated & smart team in direct cooperation with the founders & partners, creating real added value by linking strategy and implementation.
• Your hard work pays off! You benefit from attractive salary packages, participation in sales success and exclusive investment opportunities. In addition, we promote our top talents through the 'Digital Leaders of Tomorrow' program and thus offer you further exciting benefits.
• Your development - our concern: From day one, you will be supported on your journey through a wide range of development opportunities, quickly take on responsibility and have the opportunity to shape your individual career at OMMAX - with us you will become a digital leader!
• Your working environment: You will be immersed in a diverse and family-friendly environment with a strong team spirit, benefitting from a flexible and hybrid working model in one of our offices in Munich, Berlin, Hamburg and London.  
• Your view into the future: You will work at the cutting edge and gain valuable insights and practical experience with a focus on digital business models and data-driven value creation in eight forward-looking industries.  
• Your benefits on top: You can look forward to regular team events and joint sports sessions, an attractive company pension scheme, an exclusive Wellpass membership as well as mobility and meal allowances and a wide range of other company benefits. 

About us

OMMAX – Building Digital Leaders is a digital strategy consultancy based in Europe, specializing in  sustainable digital value creation in over 50 countries, while catering to an array of mid-sized companies, large enterprises, and >50 private equity firms around the world. Composed of >300 international experts and with >2.000 realized projects in the fields of  digital strategy, digital operational excellence, data science, and transaction advisory services, OMMAX is a front-runner regarding holistic data-driven  strategy consulting and end-to-end execution of digital solutions.