At mgm, we have been advising and managing digitalization projects for our international clients for over 20 years. With holistic solutions, we empower IT, business, and organization to realize the opportunities of digital transformation. Our more than 65 colleagues at six European locations share a passion for digital change.

Shape the future of work with us as

Junior Consultant Information Security (m/f/d)

You combine practical IT security expertise with an understanding of regulatory requirements and translate both into actionable solutions for our clients. You have practical knowledge of IT infrastructures and system architectures and understand the true implications of security requirements. Through collaboration with our CIO Advisory team and the internal Cyber ​​Security competence team, you actively contribute your experience and further develop our security consulting services.

What are your tasks?

• Advise our clients on the evaluation and further development of their IT security architecture and processes with an understanding of the underlying infrastructure and system landscape.
• Analyze regulatory requirements (especially NIS2, KRITIS, DORA) and derive pragmatic, implementable measures from them.
• Conduct gap and risk analyses based on recognized standards (e.g., ISO/IEC 27001, BSI IT Baseline Protection) and support clients in prioritization and implementation.
• Develop security guidelines and support the establishment and further development of the ISMS.
• Coordinate and moderate meetings between IT, business units and compliance, including with external examiners and auditors.
• Contribute your expertise to our internal Cyber ​​Security competence team and actively develop our security consulting services.

What are you bringing?

• You have a very good completed Master's degree (e.g., Computer Science, Business Informatics, IT Security or similar)
• You bring 1–4 years of practical experience in IT security, IT compliance or IT risk management, ideally with direct relevance to infrastructure or system architecture.
• You are familiar with relevant standards and regulations (e.g., ISO/IEC 27001, BSI IT Baseline Protection, NIS2, KRITIS, DORA) and can classify and operationalize their requirements.
• You can structure and clearly communicate technical information to various stakeholders, from IT teams to management.
• Initial certifications (e.g., ISO 27001 Foundation, CompTIA Security+) are a plus; we will support you specifically through further training and mentoring.
• Fluent German and English skills, as well as a willingness to travel, complete your profile.

What does mgm offer you?

• Attractive all-inclusive package:
  • Subsidized Germany ticket, BahnCard and first-class train travel
  • Smartphone and a company credit card (also for private use)
  • Company pension scheme contribution and corporate benefits
• Individual freedom: Flexible working hours and a place of trust.
• Long-term commitment: Permanent employment contract
• Work-life balance: 30 days of vacation and a sabbatical option
• Further development:
  • Mentoring and sponsorship program
  • Development discussions held twice a year
  • Internal and external training and development opportunities within our specialist teams
• Team events: summer party, consulting days, company birthday celebration

Contact

Do you have any further questions or need more information? Feel free to contact our recruiting team, who will answer all your questions about mgm.