Information Security Officer (m/f/d)

What you can move with us ISMS Responsibility & Development: You assume the overall responsibility for the operation and the continuous development of the information security management system (ISMS) certified according to ISO 27001:2022 Policy & Processes: You define, maintain and monitor information security policies, standards and processes and ensure their sustainable implementation Risk and impact analyses: You conduct risk, protection and business impact analyses, implement appropriate measures and consistently manage their implementation Regulatory compliance: You ensure compliance with legal and regulatory requirements (e.g. NIS2) and develop appropriate measures Audit Management: You prepare internal and external audits, accompany them actively and ensure a structured follow-up of certification and monitoring audits BCM & Incident Response: You are responsible for the governance and further development of IT business continuity management and incident response processes Awareness & Training: You design and implement targeted awareness programs for the sustainable awareness of employees and managers Reporting & Communication: You prepare regular reports for management and relevant bodies and provide transparent basis for decision-making Interface work: In close cooperation with IT, departments, data protection and compliance, you are driving forward the continuous improvement of information security

You're right with us when... Bringing you a degree in IT, information security, business informatics or a comparable qualification You have first knowledge of ISO 27001 and a basic understanding of ISMS structures and processes You ideally have first trainings or certifications (e.g. ISO 27001, CompTIA Security+, comparable trainings) in the field of information security Bring a basic understanding of risk analysis, protection requirements assessments and IT-related assessment procedures You ideally have collected first contact points with audits or cooperation with internal and external auditors You are interested in creating, maintaining and implementing security policies, standards and processes You are structured, independent and enjoy documentation and process optimization You have a basic understanding of IT systems, business processes and organizational processes You convince through analytical thinking, communication strength and a high sense of responsibility You have good English skills in word and writing or want to further develop them