Information Security Officer (m/f/d)

abcfinance - the financial service provider for the middle class.abcfinance - the financial service provider for the middle class.

For over 45 years, the abcfinance Group has been partnering with the German middle class with innovative financing solutions that ensure sustainable growth and reliable stability. Part of this group is the abcbank, which specialises in leasing and factoring business as refinancers. In order to provide our customers with the best service, we rely on a team of over 730 employees at 14 locations across Germany, who use their competencies for companies from various industries.

Control our ISMS. Continue developing it according to ISO/IEC 27001 and make sure that DORA is lived in everyday life. Evaluate ICT risks and manage decisions. If protection requirements are established and risk analyses are carried out, the risk register is responsible and whether the measures actually work. Put the rules. Write security policies and standards to understand and apply them. Accompanying audits from start to finish. This applies to internal and external audits: plan them, evaluate the findings and, together with specialist departments and IT, ensure that the measures are implemented. Evaluate the situation professionally in case of safety incidents, control the cause analysis and make sure that we learn from it. Continue developing the meaningful ISMS and KRI reporting. Together with our AI Engineer, you can consider how AI agents can perform tasks in ISMS, such as control, detection and reporting. Work closely with IT, SOC, BCM/IKS, data protection and compliance and carry the topic of security into the organization, for example via awareness formats.

You have a degree in IT, information security, business informatics or a comparable subject, or you have built well-founded know-how on another way, such as professional practice and certification. You have several years of experience in information security, IT security, IT risk management or IT audit. You bring safe handling of ISO 27001. Knowledge in DORA and the requirements of supervision are a clear plus. You have experience in assessing risks realistically and deriving measures that are both effective and feasible. You are able to explain complex technical topics in such a way that management and disciplines understand them and act accordingly. You are convinced by the willingness to take responsibility and address uncomfortable topics. You have experience in cooperation with the supervisory board, in particular BaFin and Bundesbank, and ideally have certifications such as CISSP, CISM, CISA or ISO 27001 Lead Auditor.

Flexible working hours and hybrid work: Whether in the office or during the day in the mobile office - with flexible division of working time and our workation concept, you use your time resources as best suited for you. Continuous learning: Expand your personal and professional skills with regular development opportunities. Your training is part of our corporate strategy. Additional benefits: In addition to an attractive salary, an occupational pension scheme, as well as an asset-effective service, expect You can enjoy other useful benefits such as a Germany ticket, a Jobrad offer and a fitness and wellness offer with EGYM Wellpass. .