Your Tasks

• Support for our international units in implementing security measures in accordance with group-wide ISMS requirements – including security assessments, test plans, and conceptual development
• Design, implementation, and continuous development of governance structures within the framework of the group-wide Information Security Management System (ISMS) according to ISO/IEC 27001
• Conducting risk analyses, creating information security concepts, and deriving concrete recommendations for action
• Carrying out trainings and awareness activities on IT security topics – especially for our international entities
• Leading and participating in projects related to information security and information risk management – serving as an interface between IT, specialist departments, and international units
• Contributing to internal and external audits as well as implementing regulatory requirements, especially in the context of DORA and NIS2

Your Profile

• Completed degree in information security, IT security, (business) informatics, or a comparable qualification
• Extended knowledge in information security, IT risk management, and relevant standards (e.g., ISO/IEC 27001, NIST, BSI IT-Grundschutz)
• Understanding of the relationships between IT systems, applications, and platforms as well as their security requirements
• Experience with regulatory requirements such as DORA, NIS2, or KRITIS is an advantage
• Strong communication skills and intercultural competence
• Ability to work independently, strong problem-solving skills, and enthusiasm for shaping change
• Very good command of spoken and written German and English (C1)