Chief Information Security Officer (CISO) (m/f/d)

Strategic development and control of the Information Security Management System (ISMS) according to BSI IT-Grundschutz Development, updating and enforcement of university-wide security policies, standards and processes Reporting on the information security situation vis-à-vis university management Advising university management, faculties and central institutions in all questions of information security ITRisiken identification, analysis and assessment as well as further development within the framework of a holistic risk management Planning, control and evaluation of security measures and carrying out audits and reviews Cooperation with internal and external bodies to address security incidents Building and promoting sustainable safety culture through training and awareness-raising Networking, cooperation and communication with the relevant areas of the University Participation in strategic digitization projects and evaluation of security-relevant aspects in IT projects and procurement

We expect completed academic studies (e.g. Master or Diploma), preferably in a subject area relevant to the task, e.g. computer science, business informatics, security management or alternatively equivalent skills and experience in this field of responsibility multiannual relevant professional experience in information security Experience in building and operating an ISMS according to BSI IT-Grundschutz and/or ISO27001 relevant knowledge of technical and organisational security measures at network, operating system and application level Gender and Divesity skills or the willingness to acquire them high degree of self-responsibility, structured and independent operation and pronounced service orientation above-average commitment and enforcement capability, high resilience, excellent communication and cooperation strength We wish Information Security Certifications (e.g. BSI Basic Protection, ISO 27001 Lead Implementer, CISM, CISSP) Experience in carrying out risk analyses, safety assessments Incident and audit management Experience in data protection and/or business continuity management Experiences with complex IT processes such as ERP systems Experience in public administration, preferably in higher education

Remuneration according to E13 TV-L indefinite Full time internal and external training opportunities Variety of health, consulting and prevention offers Compatibility of family and occupation safe workplace fixed place of service (Bielefeld) without travel FlexWork: basic option for mobile work (catch depending on the task field) good transport connection Additional operational care (VBL) collegial cooperation open and pleasant working atmosphere modern working environment with digital processes