Expert in information security and risk management (m/f/d)

Development and implementation of safety standards in the second-line-of-defense along existing regulations, laws and guidelines. Orientation to common standards and standards such as ISO 2700x and the NIST Cyber Security Framework Identify vulnerabilities using audits and Threat Led Penetration Testing Implementation of risk assessments where threats are systematically identified and assessed by structured and methodological procedures. Dynamic threats such as cyber attacks and geopolitical security are particularly relevant. Complex risk analyses are carried out independently, if necessary under expert guidance of a team Assessment of identified risks in cooperation with the asset advertisers as part of a business impact analysis, assessing both the probability of occurrence and the nature and amount of possible damage Supporting management through risk assessments in prioritizing the risks to be mitigated and the optimization measures to be carried out. This includes the definition of technical, infrastructural, organisational and personnel measures to reduce the likelihood of prioritised risks in coordination with risk sponsors and management Security Incidents Processing within a 24/7 Incident Response Team Close cooperation with data protection, IT security, outsourcing and ICT risk management

At least 5 years of experience in the field of finance Knowledge of information technology, security and risk management Be familiar with the relevant legal and regulatory requirements and the common standards Impressed analytical and conceptual skills as well as a high problem-solving competence Affinity for new developments and technologies (digital media and agile mindset) High readiness for learning/change, innovative ability, team skills determination and resilience in stress situations Good knowledge of German and English in word and writing

Modern talent management for career development Active promotion of a good reconciliation of work and private life (including flexible working hours, sabbaticals and the possibility to work in part on a mobile or home office) Attractive occupational pensions Comprehensive health management (e.g. cooperation with gyms, occupational medical service, preventive examinations) Interesting leasing possibilities, e.g. Job-Rad, Tablet, Smartphone Great lunch offers (bio, vegetarian or vegan) Several daycare centres