• Define, govern, and evolve cybersecurity architecture models and standards, aligning global frameworks (NIST, ISO 27001, CIS, COBIT) with the specific needs of operations; • Lead security architecture projects and initiatives for multi-cloud, on-premises, network, application, industrial IoT/IIoT, data, and mobility environments; • Design solutions for threat prevention, detection, containment, and remediation, integrating SIEM, SOAR, EDR, IAM systems, and advanced encryption; • Contribute to defining identity and access policies and controls (IAM, SSO, MFA), network segmentation, endpoint protection, vulnerability management, and governance; • Promote integration between physical security, IT, OT (Operational Technology), and operations teams to create resilient, secure environments; • Develop and validate business continuity, cyber disaster recovery, and incident response strategies; • Evaluate and implement innovative security solutions (Zero Trust, Cloud Security Posture Management, Threat Intelligence, security automation and orchestration); • Ensure compliance with data protection laws and regulations in the countries where the company operates (LGPD, GDPR, PIPEDA); • Produce and maintain technical documentation, security plans, best-practice guides, and training for internal teams; • Participate in technical communities, forums, audits, and global compliance assessments; • Other routine duties of the area.

• Implement and maintain robust security controls to protect our cloud infrastructure and applications. • Discover, remediate, and validate security issues across cloud infrastructure. • Perform architectural/design reviews through a security lens and provide timely, actionable requirements and recommendations. • Collaborate with security leadership, compliance, and engineering teams to execute security strategies. • Build, deploy, and manage security tools such as WAF, IDS/IPS, workload protection, GCP Command Center, and Azure Security Center, etc. • Propose and contribute to security and compliance improvements for nesto CI/CD pipelines and deployment processes. • Automate infrastructure provisioning and deployment processes using Infrastructure as Code (IaC) tools like Terraform or Pulumi. • Design and operate scalable processes to provision cloud access and maintain least privilege. • Participate in and support the incident detection and response process by enhancing observability and alerting and assisting the incident response team. • Self-organize and prioritize activities independently. • Support audits and first-party security questionnaires. • Conduct and oversee security assessments and threat modeling exercises. • Implement security controls within Kubernetes. • Build DevSecOps tools/integrations.

• Implement and maintain robust security controls to protect our cloud infrastructure and applications. • Discover, remediate, and validate security issues across the cloud infrastructure. • Conduct security-focused architecture and design reviews and provide timely, actionable requirements and recommendations. • Collaborate with security leadership, compliance teams, and engineering teams to execute security strategies. • Build, deploy, and manage security tools such as WAF, IDS/IPS, workload protection, GCP Security Command Center, Azure Security Center, etc. • Propose and contribute to security and compliance improvements for nesto's CI/CD pipelines and deployment processes. • Automate infrastructure provisioning and deployment processes using Infrastructure as Code (IaC) tools such as Terraform or Pulumi. • Design and operate scalable processes to provision cloud access and maintain the principle of least privilege. • Participate in and support the detection and incident response process by improving observability and alerts, and assisting the incident response team. • Self-organize and prioritize activities autonomously. • Support first‑party security audits and security questionnaires. • Conduct and oversee security assessments and threat modeling exercises. • Implement security controls within Kubernetes. • Build DevSecOps tools and integrations.

Role Description Als Information Security Consultant (m/w/d) begleitest Du unsere Kunden partnerschaftlich und serviceorientiert beim Aufbau, Betrieb und der Weiterentwicklung moderner ISMS-Strukturen. In enger Zusammenarbeit mit Kunden analysierst du Geschäftsmodelle und technische Gegebenheiten und entwickelst darauf aufbauend praxistaugliche, auditfähige Lösungen. Kundenkontakt ist zentraler Bestandteil der Rolle - Austausch, Beratung und gemeinsame Lösungsfindung machen Dir idealerweise Spaß. - Enge Zusammenarbeit mit Kunden bei Planung, Umsetzung und Betrieb von ISMS- und Compliance-Strukturen - Durchführung von Gap-Analysen, Ableitung und Priorisierung von Maßnahmen - Erstellung und Abstimmung von Policies, Prozessen, Rollenmodellen, SoA und Nachweisen - Vorbereitung und Begleitung von internen und externen Audits - Übersetzung regulatorischer Anforderungen in praxisnahe Betriebsmodelle - Regelmäßiger Austausch mit technischen, organisatorischen und Management-Stakeholdern Qualifications - Erfahrung in Informationssicherheit, ISMS, GRC, IT-Projekten oder Prozessmanagement - Freude an kundenorientierter Beratung und gemeinsamer Lösungsentwicklung - Fähigkeit, komplexe Security-Themen klar und verständlich zu vermitteln - Erfahrung mit ISO/IEC 27001 (oder hohe Motivation, hier schnell einzusteigen) - Kenntnisse in SOC 2, C5, NIS2 oder DSGVO von Vorteil - Tool-Affinität (z. B. Jira, Confluence, Microsoft 365/SharePoint) - Sehr gute Deutsch- und Englischkenntnisse Benefits - 100 % Remote-Arbeit (Deutschland) - Optionale 4-Tage-Woche - Hoher Kundenkontakt und sichtbarer Impact - Professionelle, offene Kultur mit starkem Fokus auf Service & Zusammenarbeit - Langfristige Entwicklungsperspektiven - Projekte im Umfeld Cloud, AI und Data Center Company Description Heartland Solutions ist eine spezialisierte Beratung für Informationssicherheit, Compliance und Managementsysteme. Wir arbeiten mit technologiegetriebenen Unternehmen aus Cloud, AI und Data Center. Unser Anspruch: Sicherheit entsteht im Dialog mit dem Kunden - und zeigt ihren Wert in funktionierender Umsetzung.