IT Security Expert

Quick Facts

• Role: IT Security Expert (multiple positions)

• Location: Berlin, Würzburg, or nationwide

• Employment: Full-time (part-time generally possible)

• Work model: Mostly home office after onboarding; occasional planned business travel

• Security requirement: After a job offer, a security clearance under SÜG is required

Description

You will support the strategic development and control of information security management, ensuring implementation according to BSI IT-Grundschutz standards. The role includes coordinating security policies, concepts, and instructions, participating in IS risk management, reviewing IT security concepts for approval readiness, and monitoring the effectiveness of information security measures. You will also provide technical and specialist support for the ISM tools used.

Responsibilities

• Strategically develop information security management and monitor implementation

• Conceptual steering and coordination of policies, concepts, and procedures for implementing information security

• Participate in the IS risk management process and support IS risk control

• Review IT security concepts and prepare them for approval

• Steer verification and control processes for information security measures and monitor effectiveness

• Report implementation status of information security to the IT security officer and the directorate

• Provide specialist and technical support for the ISM tools in use

Requirements

• Degree (Bachelor/Diploma/FH or equivalent), ideally with an IT focus, plus at least 3 years current, role-relevant IT security experience; or IT-related vocational training plus at least 5 years IT environment experience including at least 3 years current, role-relevant IT security experience; or comparable qualification with at least 5 years current, role-relevant IT security experience

• Fluent German (verbal and written)

• Preferred: IT security certifications

• Preferred: proven knowledge of BSI standards 200-1, 200-2, 200-3

• Preferred: basic knowledge of ISO 27001

• Preferred: practical experience with ISMS or risk management tools

Benefits

• Flexible, family-friendly working time models

• Support for balancing work and family life

• Occupational health management

• Varied tasks within a stable public-sector environment