Senior Manager Security Operations / Incident Response (m/f/d)

Welcome to the world of Aareal Bank! We are medium-sized and global players. As an international real estate specialist, we all work towards a common goal: the success of our customers. With us, over 1,000 people from 44 nations work on three continents, that we as a bank are quite different!We are responsible and first-class training and an organization with a lot of expertise and short ways, a lot of design space and the need to be better for our customers. This makes us strong and above all: different! Senior Manager Security Operations / Incident Response (w⁠/⁠m⁠/⁠d) For this important position we are looking for a decision-making personality that plays a central role in our operating cyber resilience. You can also take responsibility in critical situations and keep a cool head? You always work independently as well as in the team structured and score with organizational, conceptual and analytical skills? In addition, is your strength to evaluate complex technical issues, to prepare them in a comprehensible manner, and to communicate, in particular, stakeholders, management levels and relevant staff functions in an address-oriented manner? If an active interest in current developments in IT security and information security is also your profile, we say: welcome to Aareal Bank.

You run the external Security Operations Center (SOC, Tier 1–3) and are responsible for the entire Security Incident Management incl. Escalation and decision logic. In addition to compliance with reaction times, SLAs and escalation processes, the KPI-based control, quality control and performance assessments of the SOC service provider are on your agenda. Competent you develop Detection-&-Response-Use-Cases (SIEM, EDR, XDR) and conduct sustainable improvement measures from your incident reviews as well as root-cause analyses. As a lead of security incidents and cyber crises, you decide on escalation levels as well as immediate measures and coordinate all stakeholders to top management. In critical locations, you will relocate your prepared management briefings and ensure a structured follow-up of significant incidents incl. Lessons Learned and action tracking. In addition, you are responsible for the security operations platforms used by the SOC in the context of Threat Detection as well as Incident Response and evaluate their effectiveness using real incidents and KPIs. You work closely with the IT company and development team – whether for the integration of new technologies, platform expansion or the connection of new log, event and telemetry sources. Your expertise in applications as well as infrastructure is required if you advise the fields of prevention, detection and response in architectural or design decisions. The design, documentation and further development of test-resistant crisis processes are part of your task as well as the evaluation, processing and follow-up of Findings. Last but not least, you have to comply with regulatory requirements or Reporting obligations (e.g. DORA) are at the forefront of auditing and regulatory audits.

Successful study of computer science, business informatics or comparable Clear plus: relevant further trainings or Certifications in IT Security, Information Security or IT Management, e.g. CISSP, CEH, CompTIA Security+ or CCSP Multiannual relevant professional practice in IT security or information security, especially in the taxation of external service providers and complex topics in a similarly large organization Founded experience in managing IT or IT security projects and structured coordination of tasks, budgets, resources and decision-making processes Advantage: familiar with a regulated environment (e.g. financial services, KRISIS) as well as the handling of regulatory or normative requirements (e.g. DORA, BAIT, ISO 27001) Expertise in the organizational and technical contexts of IT security and information security Know-how in common security and governance concepts (e.g. risk or crisis management) and ideally around security operations, cloud security and incident/ crisis processes Understanding the roles, responsibilities and interfaces between IT operations, service providers, departments and management

Varied tasks: You can contribute your expertise, advance themes and create new things with us. We have a culture where everyone can actively contribute and influence. A Exceptional Development: We promote each person alike, so we support you with individual development opportunities and learning paths. To expand existing skills and build new pioneering skills. Worklife balance: With mobile work and flexible working time models you have the opportunity to customize your work. Thus, work, family and the personal situation of life can be brought under the best possible control. Excellent Benefits: Our services and Benefits offer you a real added value that makes us a top employer. With us, for example, you receive benefits for cooperation partners or grants for local transport. We also provide your future with an occupational pension scheme or an asset-effective service. Active Health Management: Medical check-ups, consulting services, common sports events, our popular canteen or coffee bar – We offer you the opportunity to take advantage of what promotes your health and benefits you. Apply now