Your challenges and areas of responsibility

• Monitor and assess the security situation, conduct risk analyses and implement appropriate measures
• Apply and review the existing framework ISO/IEC 27001:2017 and ISO/IEC 20000:2018 as well as its further development, according to internal requirements
• Reacting to and processing security incidents, including forensic processing of the incidents
• Creating reports and analyses with network and endpoint detection response data
• Carrying out penetration tests
• Maintaining an internal control system (ICS)
• Interdisciplinary cooperation with internal departments such as CISO, Risk Management, Data Protection, Compliance/Legal
• Conception, preparation and implementation of educational and awareness trainings for internal employees
• Carrying out and monitoring IT security audits
• Collaboration in escalation management

Your Profil

• Completed IT training and/or equivalent training/further training
• Broad IT security know-how as well as good general application and infrastructure knowledge
• Sound professional experience in a similar function with proven know-how in the areas of security incident management, security defence/protection systems
• Ability to maintain an overview in a complex environment and to align individual elements with the overall system from a risk perspective
• Good conceptual, analytical and communication skills
• Fluent in written and spoken German and English
• And last but not least, a good sense of humour

Your prospects

We offer you exciting and challenging tasks in a modern working environment with a flat hierarchy and short decision-making processes. You are part of a highly qualified and committed team in which fairness and team spirit are key. The opportunity to work from home, attractive training opportunities and a generous pension fund solution are all part of the package.

We look forward to receiving your application!