Chief Information Security Officer (CISO)

Hoppe Marine GmbH develops and supplies measurement, monitoring and control systems for ships worldwide. With IACS UR E26/E27, the requirements of classification societies and NIS2, Cybersecurity is an essential prerequisite for approval, customer acceptance and delivery.

As Chief Information Security Officer (CISO), you are responsible for the information security of Hoppe Marine GmbH as well as the cyber and system security of our products and maritime systems throughout the life cycle.

Organization and Information Security Development and further development of the Information Security Strategy and the ISMS according to ISO 27001 Control of certification, customer and monitoring audits and the necessary detection processes Implementation of relevant requirements from NIS2 Identification, assessment and treatment of information security and cyber risks Advising the management and departments as well as supporting security requirements and assessments Coordination of Incident Response, Crisis Management and Business Continuity Assessment of security risks to suppliers and service providers Establishment of awareness and further development of security culture and training of employees Products & maritime systems Responsibility for the cyber and system security of our products and maritime systems throughout the life cycle Implementation of relevant requirements from IACS UR E26/E27, IEC 62443 and the rules of classification societies Establishing and developing a Secure Development Lifecycle Supporting cybersecurity and certification projects including security concepts, risk analyses, audits and decreases Assessment of threats and vulnerabilities and monitoring of appropriate countermeasures Support in the secure design of network architectures on board, in particular segmentation, firewalls and secure communication Close cooperation with engineering, development, product management, component management, customers, auditors and classification societies, as well as quality management and GDPR

Studies in computer science, cybersecurity, electrical engineering, automation technology or comparable qualification Multiannual experience in information security, IT/OT security or system security, ideally in responsible function Practical experience with ISO 27001 Experience with Security Assessments, Tests and Certifications Good understanding of network architectures in industrial or technical environments Sovereign appearance against management, departments, customers, auditors and classification societies Very good knowledge of German and English That would also be valuable Experience with maritime cybersecurity, especially IACS UR E26/E27 or DNV-RU-SHIP Pt.6 Ch.5 Knowledge of NIS2 Experience with network technology in maritime or OT environments Certifications such as CISSP, CISM, CRISC, ISO 27001 lead auditor/implementers or qualifications in the field of IEC 62443

The basics: flexible design of working time, top equipped and modern workplace, 30 days holiday a year, holiday and Christmas money Your talent promotion is important to us: Individual training and development opportunities We cultivate an open and international corporate culture: regular company events, lunch at a small price, roof terrace for sunny days What is good for you and your health is also good for us: Monthly grant to Urban Sports Club membership, service bike leasing, job ticket, meditation offers Last but not least: We also have the famous fruit basket and free coffee. More importantly, however, is that you feel welcome and you can develop your full potential. .