Expert Security Governance (m/f/x)

Trust something new, grow beyond itself and redefine the boundaries of the feasible. That is exactly what our employees can and should live daily. To set the pace with our innovations and make it great. Because there are a lot of fascinating people behind every successful company. ZEISS employees work in an open and modern environment with numerous development and further training opportunities. Our culture is characterized by expert knowledge and team spirit. All this is supported by the special ownership structure and the long-term goal of the Carl-Zeiss Foundation: to advance science and society together.

Today dare. Inspire tomorrow.

Diversity is part of ZEISS. We look forward to your application regardless of gender, nationality, ethnic and social origin, religion, world view, disability, age as well as sexual orientation and identity.

Apply now! In less than 10 minutes.

Definition, development and review of strategies, procedures, guidelines, forms and templates for information security in cooperation with the relevant experts of SMT information security

Recommendation and development of measures to ensure compliance with ISO 27001 and other applicable requirements and frameworks for information security

work on the assessment and analysis of information security risks to ensure that appropriate measures are taken to address identified information security risks appropriately

Development and implementation of information security audits in all SMT locations together with the local responsible

They perform operational risk management and sensitize employees through Awareness training

They work closely with the various interfaces of the SMT Information Security Organisation and continuously develop the ISMS

Application of comprehensive ISMS components (including security awareness, reporting, audits)

3 years of professional experience in an area related to IT or information security, e.g. information security management, ISO 27001, information security metrics, information security incident management

ideally IT security certifications (e.g. CISA, CISM, ISO 27001 Lead Implementer, TÜV IT Security Manager/Auditor, etc.)

first experience with the successful implementation of projects related to ISO 27001, Information Security Audits, Creating and Supporting the Implementation of Framework Directives at Global Level in Complex Environments

Knowledge in the field of data protection (GDPR)

Ability to work structured and independent

an analytical personality capable of solving complex tasks and problems through innovative thinking

good and proven practical knowledge in the field of project management

analytical thinking, structured working and rapid understanding - high level of problem-solving competence

strong communication skills and team skills

German and English, other languages are advantageous

JOBV1_EN