Information Security Specialist (m/f/d)

Operation & Development of Security Solutions: Control and Optimization of Central Security Components such as Mail Security, Endpoint Protection and Identity Protection Incident management: analysis, limitation and coordination of safety incidents; Follow-up incl. Lessons Learned and action tracking Operational IT Security: Self-Employing IT Security Requests from Day Business and Projects Security Awareness: Designing the Awareness Strategy, creating training content and target group-oriented communication to strengthen our security culture Phishing simulations: planning and implementing automated campaigns – from design to rollout to evaluation Vulnerability & Patch Management: Identification and tracking of necessary IT measures; close cooperation with other IT teams to resolve vulnerabilities ISMS further development: support in the maintenance and optimization of our information security management system according to ISO 27001 Project cooperation (optional): Active support in IT projects, e.g. for rollouts, migrations or initiatives such as Zero Trust and System Hardening

completed studies in (economic) informatics, IT security or a comparable subject; alternatively an IT training and/or multi-year professional experience in the field of IT security Practical experience in information security or IT security operations (e.g. incident handling, vulnerability management, endpoint, email and identity protection) Understanding common security solutions in SIEM/SOC as well as endpoint and identity protection (e.g. Microsoft Entra & Defender, Trend Vision One, CrowdStrike) Safe handling of workplace tools such as Microsoft 365 and collaboration platforms (e.g. Jira, Confluence) Basic knowledge of ISMS according to ISO/IEC 27001 and related processes (risk and action management, incident management) Analytical and structured working methods combined with pronounced communication strength in German and English Knowledge of ITIL-oriented processes and service processes are advantageous Certifications desirable (e.g. CompTIA Security+, SSCP, CySA+, CEH, ISO 27001 Lead Implementer)

30 days holiday, holiday and Christmas money, attractive sliding time system Newly built, modern office building with roof terrace, parent-child office, fitness room, flexible workstations and supported gastronomy Individual continuing and continuing training opportunities Pension fund with attractive employer share Free parking Grant for the Deutschlandticket Company fitness and exclusive discounts via Corporate Benefits