Senior Specialist Information Security and Data Protection, Focus: Governance (m/f/d)

Deutscher Sparkassen Verlag GmbH is the holding company of the DSV Group, the specialized service provider for the Sparkassen financial group. We support our specialist competencies with a clear entrepreneurial orientation. We bundle our strengths in central services such as strategy, sales, finance, personnel and drive digitization forward. This is how we make the savings banks strong together. Be part of our team!

What are you waiting for? As an experienced team player, you take an active role in managing our central ISDS team and support the DSV Group in providing secure solutions for the Sparkassen financial group and contracting entities.

Regulatorics with effect: You follow relevant regulatory developments in the banking and IT environment, assess their impact on the DSV Group and introduce practical improvements to the further development of our management system.

Structures that work: With your very good sense of the strategic, economic and operational impact of the written order on product management, software development and IT operation, you will be critically involved in the further development of our internal rules according to ISO 27001, DORA, GDPR and other industry-specific regulatory requirements.

continuously improve quality: You keep an eye on the effectiveness and efficiency of our internal audit process as well as our consulting and support services and actively promote their continuous optimization.

Certification & Awareness: You support the organization in the preparation and implementation of the annual certification examination according to ISO 27001 and with Awareness measures ensure that information security and data protection are firmly anchored in everyday life.

What do you have to bring? Funded technical basis: You have completed your studies with a focus on computer science, business informatics or law – or a comparable training or Further qualification with relevant practical reference.

Experience in Information Security & Privacy: You have several years of professional experience in the field of information security and data protection, for example in the environment of ISO 27001, BSI-Grundschutz or GDPR, and have contributed in particular to the management of management systems and certifications.

Governance & regulation: You have collected relevant professional experience in a compliance or governance function in the regulated environment (e.g. banks, critical infrastructure) and brings as much knowledge as possible to DORA.

Understanding control models: You bring a basic understanding of the work in the three-line model of the IIA (here: 2nd line).

Communication strength: You can easily prepare complex facts and communicate convincingly – both in writing and oral – and move safely in exchange with stakeholders at different hierarchical levels.

Analytical Thinking & Quality Claim: You work structured, think analytical and have a high claim to the quality of your work results.

Certifications: Ideally you have relevant certifications in the ISDS environment (e.g. CISM, CISSP, ISO 27001 Lead Implementer) – or are interested in developing yourself in this direction.

You have very good knowledge of German in word and writing.

Your benefits Pension provision Flexible working time Bike leasing Sports Canteen Mobile work Individual training Company events Holiday days plus Childcare allowance

Together into the future We respect equal opportunities, diversity and inclusion. You are welcome to us as you are, no matter how old or young you are, what sex you live where you come from, whether you have health impairments, what you believe or who you love. Further information on accessibility can be found here: Diversity with us

Location At the Wallgraben 115 70565 Stuttgart

Your contact person Lucia Culenova recruiting@dsv-gruppe.de