Data Protection and Information Security Officer

Quick Facts

• Position: Data Protection and Information Security Officer (Full-time or Part-time)

• Focus: GDPR/BDSG privacy management and IT/OT information security

• Compensation: Salary grade 12 TVöD (depending on experience)

Description

You will build and further develop an integrated IT/OT security concept aligned with the City’s obligation to operate IT based on the BSI IT-Grundschutz framework. You will assess IT/OT security risks and gaps, plan and monitor technical and organizational security measures, and produce annual IT/OT security roadmaps with risk evaluation, prioritization, KPIs, and reporting. You will also perform IT/OT-related audits and inspections and maintain privacy documentation and controls.

Responsibilities

• Build and develop an end-to-end IT/OT concept based on BSI IT-Grundschutz

• Identify and assess IT/OT security risks and weaknesses—especially for MBE (management/operating equipment) and GLT (building management/control systems)

• Plan, coordinate, develop, implement, and monitor technical and organizational IT/OT security measures

• Create annual IT/OT security roadmaps including risk assessment/prioritization, typical metrics (KPIs), and report documentation

• Draft, review, adapt, and further develop internal standard regulations and IT/OT security guidelines

• Conduct IT/OT-related audits and inspections

Requirements

• Completed Bachelor’s degree in Public Administration, Digital Administration, Law, or a comparable field

• Long-term professional experience in data protection with focus on DSMS or data protection organization

• Experience as an internal Data Protection Officer in a public authority or company

• In-depth knowledge as a certified Data Protection Officer under GDPR

• Detailed knowledge of EU GDPR and BDSG

• Expertise in data protection practice, data protection law, and data security (with IT experience if applicable)

• Practical experience with data protection audits and maintaining Records of Processing Activities (RoPA/VVT) for DPIAs and documentation

• Basic knowledge of GEFMA, HOAI, process management, and risk management

• Ability to plan and organize work; independent working style

• Very good oral and written communication

• Negotiation skills and assertiveness

• Diversity competence

Benefits

• Modern, collegial working environment and meaningful tasks

• Onboarding, flexible working hours, and home office/mobile work options

• Internal continuing education

• Health management with sports and fitness offers

• 30 vacation days (5-day week)

• Job ticket premium for the RMV area without personal contribution, including rideshare option

• Company pension plan