Information Security Expert

Quick Facts

• Role: Information Security Expert

• Focus: Coordination, assessment, and follow-up of information security management aligned with BSI IT-Grundschutz standards

• Work model: After onboarding, mostly possible to work from home if labor-law requirements are met

• Travel: Occasional and planned business trips

Description

You will help shape the strategic development of information security management and ensure its implementation through monitoring and control. The role includes coordinating and steering information security policies and instructions, supporting IS risk management, reviewing IT security concepts for release, and overseeing the effectiveness of security measures. You will also report implementation status to the IT security officer and the directorate and provide technical and substantive support for the ISM tools.

Responsibilities

• Strategic further development of information security management and control of implementation

• Conceptual steering and coordination of policies, concepts, and instructions to implement information security

• Independent participation in the IS risk management process and technical support for IS risk handling

• Substantive review of IT security concepts and preparation for approval

• Steering processes for checking and controlling information security measures and monitoring their effectiveness

• Reporting on implementation status of information security to the IT security officer and the directorate

• Technical and substantive support and steering of the deployed ISM tools

Requirements

• University degree (Bachelor/Diploma/FH or equivalent), ideally IT-related, plus at least 3 years of current, job-relevant professional experience in IT security

• OR vocational training, ideally IT-related, plus at least 5 years of professional experience in the IT environment, including at least 3 years current, job-relevant experience in IT security

• OR comparable qualification (e.g., Fachwirt/in) with at least 5 years current, job-relevant experience in IT security

• Verifiable, fluent German language skills (spoken and written)

• Desirable: IT security certifications

• Desirable: demonstrated knowledge of BSI standards 200-1, 200-2, 200-3; basic knowledge of ISO 27001

• Desirable: practical experience with ISMS and/or risk management tools

• Willingness for occasional, planned business travel

• After an offer of employment: successful security screening under 9 SÜG; no security risk allowed per 14 SÜG

Benefits

• Interesting and varied work

• Family-friendly and flexible working time models

• Support for work-life balance and occupational health management

• Possibility to work mostly from home after onboarding under applicable legal requirements