Manager (m/f/d) Information Security & Compliance

You will shape Hapag‑Lloyd’s information and cyber security risk agenda, translate complex regulatory requirements into practical solutions, and operate a world‑class Information Security Management System. Working closely with the CISO, IT, Legal, Data Protection, Risk & Control, Audit and business functions, you will drive compliance, resilience and continuous improvement across our global organisation.

Shape and execute the global information and cyber security risk management strategy and roadmap

Translate regulatory requirements (KRITIS, NIS2, TISAX, ISO 27001, NIST, GDPR) into clear business requirements and controls

Develop, maintain and continuously improve ISMS policies, standards and security controls in partnership with technical and business experts

Operate the global ISMS, monitor performance and drive continuous improvement

Coordinate external audits, certifications and work with auditors, certification bodies and industry experts

Raise security awareness, deliver training and promote secure behaviours across the organisation

Define, collect and report meaningful ISMS and security metrics to senior management

Monitor emerging threats, regulatory changes and industry trends and recommend practical enhancements

Extensive experience in information security, cyber security, GRC or compliance

Proven track record of building, operating or improving an ISMS in a large, international organization

Hands‑on experience with audits, certifications and external assessments (ISO 27001, TISAX, etc.)

Deep knowledge of cyber risk management, security controls and relevant standards (KRITIS, NIS2, NIST, GDPR)

Excellent communication and stakeholder‑management abilities across technical and business audiences

Demonstrated ability to define and report security metrics and drive continuous improvement

Fluent in written and spoken English; additional language skills are a plus