IT Infrastructure & Information Security Specialist (m/w/d)

Quick Facts

• Central role combining IT infrastructure administration (~50%) with IT & information security responsibilities (~50%), with a path toward becoming an Information Security Officer (ISB).

Description

You will manage and support the company’s IT infrastructure while developing and improving the organization’s information security program. The role includes practical security work (e.g., vulnerability management, security incidents, and risk management) as well as ongoing development of the ISMS. Over time, you will take on broader ISB responsibilities.

Responsibilities

• Administer and maintain IT infrastructure, including servers, networks, and systems.
• Install, configure, and maintain hardware and software.
• Ensure data security and manage backups.
• Troubleshoot IT problems and provide IT support.
• Optimize processes and systems to increase efficiency and security.
• Develop and maintain technical and organizational security measures, including vulnerability management and security incidents.
• Identify, assess, and track information security risks and derive appropriate measures.
• Build and continuously improve the ISMS, including policies, standards, and guidelines.
• Advise IT and other business units on security requirements and support audits, awareness activities, and security-related reviews.
• Gradually assume the tasks and responsibilities of the Information Security Officer (ISB).

Requirements

• Completed IT-related training (e.g., System Integration Specialist) or equivalent qualification with relevant experience.
• Multi-year experience administering and operating complex IT infrastructures.
• At least 3 years of relevant professional experience in IT and information security, including practical experience with vulnerability management, security incidents, risk management, security policies, or ISMS.
• Understanding of both technical and organizational information security and interest in taking ownership beyond purely technical security.
• Knowledge of common security standards/frameworks—especially ISO/IEC 27001 or BSI Grundschutz (advantageous).
• Experience with monitoring and backup solutions.
• Independent, structured, solution-oriented work style and ability to communicate security topics and risks appropriately up to management.
• Good German and English proficiency (spoken and written).

Benefits

• Onboarding and training via the Herrmann Academy.
• Exclusive employee discounts.
• Subsidized lunch, JobRad, Deutschlandticket, and a funded fitness club membership.
• Room for new ideas and strong company values, with a long-term perspective in a responsible security role.