CLARK is hiring a
Senior ISMS Manager

Summary

CLARK is a leading insurtech company with over 800 employees across five European markets. As an Senior ISMS Manager, you will be responsible for establishing, implementing, and maintaining an Information Security Management System (ISMS) in accordance with relevant compliance frameworks such as DORA, ISO27001, C5, etc. The ideal candidate should have a minimum of 7 years of experience in ISMS management, a Bachelor's degree in Information Security, Computer Science, or a related field, and relevant certifications. The role involves designing and implementing an effective ISMS, conducting risk assessments, developing security training programs, and preparing regular reports on ISMS performance. CLARK offers a diverse work environment, hybrid working models, flexible hours, 30 days of holiday plus 2 impact days, exclusive perks, complimentary drinks, fresh fruit, and snacks, cultural initiatives, and team events.

Requirements

• Minimum of 7 years in ISMS management, or equivalent experience
• Bachelor’s degree in Information Security, Computer Science, or a related field
• Proven experience in implementing and maintaining ISMS and compliance frameworks
• Knowledge of DORA, ISO27001, C5 and other relevant security standards and regulations
• Ability to design and manage a common control framework
• Strong communication skills in English; proficiency in German is a significant advantage

Responsibilities

• Design and implement a common control framework that can incorporate various security standards and best practices
• Develop and maintain an effective ISMS aligned with DORA initially, followed by other relevant compliance frameworks (i.e. ISO27001, C5)
• Plan and conduct internal audits to ensure compliance with ISMS and regulatory requirements; coordinate external audits as necessary
• Create and update information security policies, procedures, and guidelines to align with the ISMS and compliance requirements
• Conduct risk assessments and develop mitigation strategies to address identified risks
• Develop and deliver security training and awareness programs for staff to promote a culture of security
• Prepare regular reports on ISMS performance, compliance status, and security metrics for ISO and senior management

Preferred Qualifications

Relevant certifications (e.g., CISSP, CISM, ISO 27001 Lead Implementer)

Benefits

• Hybrid working models and flexible hours
• 30 days of holiday plus 2 impact days
• Exclusive discounts tailored just for you
• Complimentary drinks, fresh fruit, and snacks
• Cultural initiatives and team events