Information Security & Compliance Manager

You will shape Hapag‑Lloyd’s information and cyber security risk agenda, translate complex regulatory requirements into practical solutions, and operate a world‑class Information Security Management System. Working closely with the CISO, IT, Legal, Data Protection, Risk & Control, Audit and business functions, you will drive compliance, resilience and continuous improvement across our global organisation.

• Extensive experience in information security, cyber security, GRC or compliance
• Proven track record of building, operating or improving an ISMS in a large, international organization
• Hands‑on experience with audits, certifications and external assessments (ISO 27001, TISAX, etc.)
• Deep knowledge of cyber risk management, security controls and relevant standards (KRITIS, NIS2, NIST, GDPR)
• Excellent communication and stakeholder‑management abilities across technical and business audiences
• Demonstrated ability to define and report security metrics and drive continuous improvement
• Fluent in written and spoken English; additional language skills are a plus

• Shape and execute the global information and cyber security risk management strategy and roadmap
• Translate regulatory requirements (KRITIS, NIS2, TISAX, ISO 27001, NIST, GDPR) into clear business requirements and controls
• Develop, maintain and continuously improve ISMS policies, standards and security controls in partnership with technical and business experts
• Operate the global ISMS, monitor performance and drive continuous improvement
• Coordinate external audits, certifications and work with auditors, certification bodies and industry experts
• Raise security awareness, deliver training and promote secure behaviours across the organisation
• Define, collect and report meaningful ISMS and security metrics to senior management
• Monitor emerging threats, regulatory changes and industry trends and recommend practical enhancements