IT auditor – focus on penetration testing (m/f/d)

As one of the largest banking IT service providers and digitization partners in Europe, we are the driver of digitalization within the Sparkassen financial group. With more than 5,000 employees at 3 locations, we make digital banking of today efficient and develop smart financial services of tomorrow. We offer a wide range of tasks in which individual strengths can be excellently introduced. Whether it's app development, network technologies and server operation or consulting, training and support – we have every one of them to call! As a specialist:in or as a generalist:in. Everything with best career opportunities, lots of space for personal development and numerous benefits.

For the organization unit Security Management, we are looking for the next possible appointment for the Hanover, Münster or Frankfurt am Main site IT-Auditor – Focus on penetration tests (m/w/d).

IT security has become increasingly important for years. This results not least from a continuous professionalization of attackers and their methods, a significant increase in attention to the topic in public and media, as well as further increasing regulatory requirements. From the mobile app to the ATM, we consider IT security holistic. The aim of financial information security management is therefore to support the management in ensuring effective information security management and to advise the departments in implementing the processes of the information security management system. This includes, in particular, the creation and further development of company-wide information security requirements based on the requirements of ISO 27001 and supervisory requirements and the monitoring of compliance with these information security requirements. This verification of compliance with safety requirements and the verification of the adequacy and effectiveness and the adequacy of implemented safety measures is carried out, inter alia, by audits and penetration tests.

Responsible preparation, coordination and follow-up of penetration tests as well as professional classification of weak points from penetration tests in the company context Takeover of security management activities to maintain PCI DSS certification Individually responsible preparation, implementation and follow-up of information security audits External penetration tester control Accompanying the audits to maintain the ISO 27001 certification of financial informatics Further development of audit management processes and implementation of penetration tests Creation of control and result reports

Complete computer science study focusing on information security, a comparable qualification and at least six years of relevant professional experience Funded and practical knowledge and experience on penetration tests and audits Independent and structured operation Embossed communication skills in dealing with various interlocutors, especially the presentation and documentation of complex issues Joy of work in an agile team

You're wondering why you should work on financial computer science? We have some good reasons for you. In addition to flexible working hours, discounted job tickets or the possibility to work on mobile, we offer you a lot more: Pension provision Accessibility Industrial sports Family service Company events Flexible working hours Mobile work Job ticket Canteen Contract Education Fitness promotion We offer you an attractive remuneration based on your qualification as well as your relevant, practical experience. .