IT Security Manager

Quick Facts

• Role focused on IT security for a hospital information system (iMedOne®)
• Collaboration across architecture, development, and operations
• Hybrid work model with flexible working hours

Description

Lead and independently manage operational IT security topics for a hospital information system, including security strategy, compliance, audits, and risk assessments. Work with architecture, development, and operations to drive security-by-design and secure development practices, including threat modeling, hardening, and vulnerability management. Ensure alignment with relevant standards and regulations such as ISO/IEC 27001, BSI Grundschutz, GDPR, and healthcare security requirements.

Responsibilities

• Analyze the existing security architecture and quickly get up to speed in complex system environments
• Derive, prioritize, and actively steer security measures in close coordination with architecture, development, and operations
• Evolve the security strategy and ensure product compliance requirements
• Support audits and ensure compliance with legal, regulatory, and internal requirements (ISO/IEC 27001, BSI Grundschutz, C5, GDPR, Cyber Resilience Act, KRITIS, NIS2)
• Support product, architecture, and development teams in security-by-design and secure development
• Perform risk analyses, threat modeling, and security reviews
• Coordinate security measures, product audits, and compliance checks
• Create and maintain security concepts, policies, and hardening guidelines
• Support vulnerability management and assess security incidents
• Evaluate third-party components and partner solutions
• Advise internal stakeholders on security requirements in the healthcare environment
• Monitor threat landscape, regulatory developments, and technology trends; sensitize and advise employees on information security topics
• Work closely with the central Security Officer responsible for ISMS, security governance, and compliance

Requirements

• Degree in computer science, IT security, medical informatics, or comparable qualification
• Multi-year experience in information security, cyber security, product security, or IT compliance
• Experience independently managing operational security topics in complex IT landscapes
• Knowledge of security standards/frameworks such as ISO/IEC 27001, BSI Grundschutz, C5 or comparable
• Experience with SDLC, secure coding, vulnerability management, and risk analyses
• Understanding of modern security concepts including security-by-design, IAM, and cloud security
• Structured work approach, strong risk awareness, and communication skills in German and English
• (Preferred) CISSP/CISM or comparable certifications and healthcare domain knowledge (HL7, FHIR, Telematics infrastructure, or hospital information systems)
• Current police clearance certificate (simple) issued within the last 3 months

Benefits

• Hybrid working model with flexible working hours
• Individual training and certification opportunities
• Attractive compensation and extensive Telekom benefits
• 30 days of vacation
• Appreciative, modern company culture