Information Security Officer (m/f/d)

About the company We stand for progress and innovative energy products that we develop with expertise and team spirit. With us, you actively shape the energy future, drive the expansion of renewable energies and are committed to sustainability and quality of life in the region. Did we awaken your interest? Our offer Holiday and Christmas money Occupational pension Own staff restaurant Flexible working time design and the possibility of home office and mobile work Leasing offers for mobile devices & attractive mobility offers Varied development and training opportunities

Various tasks As Information Security Officer (ISO), you are responsible for strategy, operation and continuous development of the Information Security Management System (ISMS) according to ISO/IEC 27001. You are the central contact person for all information security-relevant issues and advise specialist areas as well as management in implementing security requirements. You plan and conduct risk analyses, evaluate information security risks and derive risk-oriented measures. You coordinate and accompany internal and external audits (including preparation, demonstration, action management) and ensure audit and certification. You are responsible for the further development of the integrated management system and ensure consistent integration of information security with adjacent topics (e.g. data protection, business continuity, corporate security). Convincing profile Education: You have a successfully completed university degree or a comparable qualification – ideally complemented by professional experience in the environment of management systems. Professional experience: You bring experience in the construction, operation and continuous development of an ISMS according to ISO/IEC 27001; Knowledge of energy business processes is advantageous. Expertise: You have well-founded knowledge of relevant standards and legal/regulatory requirements in the context of information security (e.g. ISO/IEC 27001/27002, NIS2 and other relevant requirements) and can safely transfer them to practice. Working methods: You are a networker*in with safe appearance and communicate with different stakeholders – from specialist areas to management. A very good written and oral expressiveness is of course for you. Personality: You are thrilled with information security issues and convince with above-average commitment, high sense of responsibility and strong self-initiative. About the area The Information Security, Business Continuity, Data Protection and Corporate Security division is responsible for the strategic orientation and company-wide management of these topics in the EnBW ODR and ODR networks. It operates, integrates and develops the associated management systems in a risk- and economic manner – consistent with business requirements and with legal, regulatory and normative requirements (including ISO/IEC 27001, DIN EN ISO 22301, NIS2, requirements for systems for attack detection). In addition, the staff section strengthens the sustainable anchoring in processes and corporate culture, establishes effective governance and control mechanisms and ensures audit and detection. It is the central point of contact and coordination for internal and external stakeholders and is responsible for the planning, implementation and monitoring of certifications, audits and necessary evidence. Area of contact: Alexander Halbig, Telephone: 07961/824420, Mail: a.halig@odr.de Contact Interested? Apply online now! A letter is not required for this, if necessary we ask a few job-specific questions in our application form. In addition to the EnBW, our recruiting team will introduce additional corporate companies. Vincent Michael Grundler | v.grundler@odr.de is happy to answer any questions.

All people are welcome with us, regardless of gender, age, sexual identity, origin, religion, worldview, with or without disability.

.