[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Mercedes-Benz Group jobs](https://jobs.opennash.com/companies/mercedes-benz-group/) · [Search jobs](/search/) Mercedes-Benz Group # Information Security Consultant 210577 Mer0003S8I Security Listed on Mercedes-Benz Group’s official careers site. Listed as of October 20, 2026. Check that it is still open and apply there. [Apply on Mercedes-Benz Group’s careers site →](https://jobs.mercedes-benz.com/en/information-security-consultant-210577-mer0003s8i) [OpenNash Jobs](https://jobs.opennash.com/) / [Mercedes-Benz Group](https://jobs.opennash.com/companies/mercedes-benz-group/) / Information Security Consultant 210577 Mer0003S8I ## Job description Tasks Objective of job Ensure that the organization and IT assets follow the security standard and governance. You monitor and identify vulnerabilities in systems, threats and issues, document it and track the remediation. Develop and implement cloud security strategies. - Responsible for the governance of compliance with policies and processes to protect the confidentiality, integrity and availability of IT assets (information, data and IT services) within the organization. - Responsible for organizational and technical controls -Support in risk assessment and analysis and monitoring the implementation of risk control/minimization measures -Identification of possible vulnerabilities in services and applications. Ordering and monitoring of penetration and assessment services. Document the results and ensure mitigation/minimization -Assessing threats and developing appropriate security measures and assessing their effectiveness -Assist businesspartners in information classification -Coordination for security incidents and participation in incident response activities, including mitigation and remediation strategies [3] -Take care of actuality of disaster or application recovery plans -Develop and conduct target group orientated awareness campaigns -Define security controls derived from policies Job designation - Developing and Maintaining Security Policies and Standards Responsible for creating, updating, and enforcing information security policies, standards, and procedures that align with legal, regulatory, and contractual requirements. This includes ensuring that policies are comprehensive, clearly communicated, and regularly reviewed. - Ensuring Regulatory Compliance Ensure the organization complies with relevant laws, regulations, and industry standards such as ISO 27001, NIST, and others. This involves understanding the specific requirements of each regulation and implementing controls to meet them. - Security Audits and Assessments -Responsible for planning and conducting internal security audits to assess the effectiveness of security controls and identify areas for improvement. - Coordinate external audits and assessments, ensuring the organization is prepared and responsive to auditor requests. - Risk Management and Governance -Identifying, assessing, and managing information security risks across the organization. This includes conducting regular risk assessments, developing risk mitigation strategies, and monitoring the effectiveness of controls. - Contribute to the development of a strong governance framework for information security. - Compliance Reporting Responsible for preparing and submitting reports to management and regulatory bodies on the organization's security posture and compliance efforts. This includes tracking key security metrics, documenting compliance activities, and communicating security risks and issues to relevant stakeholders. - Policy Enforcement Responsible for ensuring that security policies are consistently enforced across the organization. This includes monitoring compliance with policies, investigating security violations, and taking corrective action when necessary - Supplier Risk Management Assesses the security practices of third-party suppliers and service providers to ensure they meet the organization's security requirements. This includes reviewing vendor contracts, conducting security assessments, and monitoring vendor compliance with security policies - Collaboration and Communication -Collaborating with other IT teams, developers, and business stakeholders. - Providing security training and awareness to employees. - Communicating security risks and recommendations to management. ### Qualifications Qualification ### Professional Skills - Deep understanding and experience on: IT Security, Risk Management, Compliance & Security Standards, Knowledge in all relevant Operating Systems, Data Protection -Knowledge of: Cloud Security, Network, Web Technologies, Database, IT operations (ITIL) - Experience with security frameworks, such as NIST, and ISO 27001. - Relevant certifications, CISA, CISSP - > 5 years experience with focus in areas of security governance and security operations Education: Bachelor's degree and above in Computer Science encompassing Information Security ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Oct 13, 2026 - Last checked: Oct 20, 2026 - Listed for: 7 days[Apply on Mercedes-Benz Group’s careers site →](https://jobs.mercedes-benz.com/en/information-security-consultant-210577-mer0003s8i) ## More jobs at Mercedes-Benz Group ### [Duales Studium Informatikcyber Security (B.Sc.) Campusmodell Sindelfingenstuttgart 01.10.2027 (Mwd) 215400 Mer00042H7](https://jobs.opennash.com/companies/mercedes-benz-group/jobs/c17d1f45dd5d725e3b95/) ### [Praktikant*In Digital Transformation And Security Im Team Ai Security Engineering (Pflicht Praktikum) 241568 Mer00048Wz](https://jobs.opennash.com/companies/mercedes-benz-group/jobs/b2792361544f2ab52230/) ### [Sap Cyber Security Expert 227117 Mer0004578](https://jobs.opennash.com/companies/mercedes-benz-group/jobs/5215bab38915e239910e/) ### [Active Safety Customer Function Owner 194173 Mer0003Wc2](https://jobs.opennash.com/companies/mercedes-benz-group/jobs/fa26d6fa96ee0e5cd0ac/) ### [Ad Backend Product Owner 222747 Mer000440T](https://jobs.opennash.com/companies/mercedes-benz-group/jobs/daa1c79d6b3f8e9ec6bc/) ## Similar jobs at other companies ### [Information Security Trainee](https://jobs.opennash.com/companies/siemens-energy/jobs/2e29450c494d2a941298/) Siemens Energy ### [Information Security Engineer Warsaw Poland](https://jobs.opennash.com/companies/equinix/jobs/4c699eb3a65219eed695/) Equinix ### [Strategic Sourcing Manager (IT & Information Security)](https://jobs.opennash.com/companies/sandisk/jobs/9a76890b87a7930a31db/) Sandisk ### [IT-Sicherheitsbeauftragter (m/w/d)/ Chief Information Security Officer](https://jobs.opennash.com/companies/totalenergies/jobs/4ad5b9a9f8dfd9a76d5d/) TotalEnergies ### [Information Security Senior Engineer Identity Governance Dallas Texas United States](https://jobs.opennash.com/companies/equinix/jobs/9b150385701efc0cb22e/) Equinix OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)