(Senior) Professional Cyber Security Engineer - Backup & Archiving (m/f/d)

The Schwarz IT supports the entire digital infrastructure and all software solutions of the companies of the Schwarz Group. It is therefore responsible for selecting, providing and operating as well as further developing IT infrastructures, IT platforms and business applications. In order to optimally support the departments through IT solutions in their business processes, the Schwarz IT takes up the requirements of the departments in consultations and works together with these professional and efficient IT solutions. As a Cyber Security Engineer - Backup & Archiving, you are responsible for the requirements, enforcement and continuous improvement of security in the context of data backup and archiving within the entire group of companies. For this purpose, you work with various stakeholders in the context of cyber security and IT infrastructure units of the Schwarz Group in a controlling function, so that accurate solutions and services can be provided to meet the defined requirements. To do this, you will introduce your expert knowledge in the context of company-wide backup technologies, storage architectures and data lifecycle management to question existing ones and, together with the stakeholders mentioned, to ensure secure throughput and restoreability in the group of companies.

Strategic responsibility for the definition, communication and further development of group-wide requirements for backup and archiving security, taking into account regulatory requirements (e.g. ISO 27001, NIS 2, BSI IT basic protection), best practices and technological developments within the field of topics. Enforcement of the requirements in close cooperation with central IT infrastructure units for the entire group of companies by joint (further) development of solutions/services and reference architectures in the context of backup & archiving, for example for data segregation, unchangeable storage (immutability) or secure key management (key management). Definition and monitoring of policy compliance based on clearly defined KPIs and control mechanisms (Control Checks) in the field of data backup and archiving. Identification and control of potential for improvement, risks and possible synergy effects in cooperation with relevant stakeholders (e.g. within central and local IT units and different ISOs) based on various sources of information and to ensure alignment between technical implementation and policy intention. Advising and empowering further cyber security units and IT infrastructure teams as a technology expert for backup & archiving (e.g. security champions, ISOs or the SOC of the group of companies) – in particular with regard to recovery concepts such as RTO/RPO and integration in business continuity and disaster recovery plans. .