IT Security Manager - ISO & Operative IT-Sicherheit (m/f/d)

We at Manufactum are explorers and designers. Since 1987 we have been looking for and finding things for daily use. Products that meet high demands that surprise, receive old ideas and advance new ones. We share these products with our customers – online and offline, in our warehouses, via catalogue and on the Internet. Since 2008, Manufactum has been part of the Otto Group and enjoys a high degree of independence and freedom of design within the Group. IT Security Manager (m/w/d) Start: From now on (depending on your availability) Type of employment: Full-time (40 hours/week)

Operational IT Security You bear the technical responsibility for our IT security infrastructure, including systems such as firewalls, VPN, FTP, EDR, NDR and others, and work closely with the Group security. You continuously monitor and monitor all security-relevant systems and networks to detect potential threats at an early stage. You analyze and process security incidents as part of our Security Incident Response Process. You take over the management and coordination of our Security Incident & Response Team (CSIRT). You are responsible for customizing and continuous optimization of our existing security solutions. You work closely with internal and external IT service providers and the Group security team to ensure a coherent security strategy. Information security management (ISB function) You are instrumental in building, implementing and continuously developing our Information Security Management System (ISMS), which is geared to standards such as ISO/IEC 27001 or BSI IT basic protection. You will first and care for all necessary security policies, processes and related documentation. You regularly carry out risk analyses, identify protection requirements and evaluate our security situation. You advise the management and the various departments on all issues relating to information security. You are responsible for the preparation and active support of internal and external audits in the field of information security.

Complete study of (economic) informatics, IT security or a comparable qualification Multiannual professional experience in IT security, ideally with ISB/ISO Knowledge of network security, firewalls, VPN, EDR/NDR, SIEM systems and common safety standards Experience in building and operating an ISMS Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor or comparable are advantageous Structured, analytical and solution-oriented operation Communication strength and ability to convey complex facts to the addressee

Active compilation of the growth rate of a medium-sized trader who, with his attitude to conscious consumption, has a unique attitude in the German retail trade Possibility of mobile work (remote), flexible working hours and various additional services (currence/Christmas money, employee discounts, etc.) Leadership style characterized by trust, transparency and freedom of design Varied activity with inspiring contacts to suppliers and manufacturers Affiliation to the Otto Group, which invests in the expansion of Manufactum and offers interesting development and exchange opportunities with its many business areas Unique working environment in a modernized brick building of the Ruhrbergbau with loft-character