SIGNAL IDUNA Gruppe | Germany | 22xxx, 21xxx, 20xxx, 44xxx Dortmund, Hamburg | Permanent position | Full time / Home office | Published since: 17.06.2026 on stepstone.de
Head of Information Security - Governance & Compliance (2nd Line of Defense) (m/f/d)
We change the insurance world and look for you to help shape the future. As one of the largest German insurers and financial service providers with headquarters in Hamburg and Dortmund, we have fundamentally transformed ourselves in recent years. Our modern and agile working world, in which we work in a centered manner, is characterized by openness and courage. We attach great importance to mutual appreciation and trust. We welcome diversity in all its facets and believe that different perspectives and experiences are crucial for innovation. Become part of our team, introduce your ideas and change the now with us. You want to shape the information security of a leading insurer from an independent governance perspective and significantly strengthen the resilience of our company in times of cloud, AI and DORA? As Head of Information Security (m/w/d), you take a central leadership role in the CISO sector, develop your team strategically and act as an important business partner for management. .
* After clicking the Read more button, the original advert will open on our partner's website, where you can see the details of this vacancy and contact information. If you need a translation of this text, after returning to our website it will be prepared and you can read it by clicking the Show full translation button.
Your tasks • Your profile • What we offer
Professional and disciplinary leadership of a team in Information Security (2nd Line) Development and control of ISMS from a governance and compliance perspective Ensuring independent monitoring (2nd Line) of information security and close cooperation with 1st Line (IT) and revision (3rd Line) Definition and development of security policies, standards and control mechanisms Responsibility for regulatory requirements (DORA, VAIT, MaRisk) incl. Interpretation and derivation of specifications Control and monitoring of internal and external audits (e.g. monitoring operations) and ensuring the sustainable processing and follow-up of findings Monitoring regulatory developments and deriving binding measures Advising management and departments as an independent control and governance function as well as creating decision templates for management and top management
have successfully completed a study of (economic) informatics or a related subject has well-founded professional and proven leadership experience in information security or cyber security with a focus on governance/compliance (ideally in the 2nd Line of Defense) draws you from very good knowledge of regulatory requirements in the financial sector (DORA, VAIT, BAIT, MaRisk) brings experience in the monitoring of audits and audits (revision, external auditors, supervision) as well as a clear understanding of the Three-Lines-of-Defense has the ability to prepare complex facts accurately and addressably up to top management level combining strategic thinking capabilities with implementation strength and strong stakeholder management brings fluent German and very good English knowledge (in word and writing) with
take a central leadership role with direct influence on the security strategy of SIGNAL IDUNA you actively shape the growing CISO area in close cooperation with the board and central control functions you can easily combine your private life and work with a flexible working time model you can stay in the sun for 30 days or walk through the mountains your skills are systematically developed within the framework of competence management you work in an environment that understands security as a strategic business enabler you can look forward to regional and varied food in our operating restaurants – also with vegan alternatives
Location
 | SIGNAL IDUNA Gruppe | |
| Dortmund, Hamburg | ||
| Germany |
The text of this ad was translated from German into English using an automatic translation system and may contain semantic and lexical errors. Therefore, it should be used for introductory purposes only. For more detailed information, see the original text of the ad at the link below.
For more information read the original ad