Cyber Security Manager as Pentest Conductor and Code Detective in the Field of Vulnerability Management

Union Investment is known for outstanding asset management expertise and thus one of the leading investment fund companies. As part of the cooperative finance group, we have been offering private individuals and institutional customers sustainable investment solutions since 1956 with the aim of increasing the wealth of our more than five million investors.

Our culture is characterized by a high level of performance and partnership. With us all employees bring their own history. It is self-evident for us to create a working environment in which people with different genders, from different age groups, with physical impairments, different sexual orientations, social and cultural backgrounds, ethnic affiliations and religions can be themselves. We appreciate this diversity and create a community to which everyone makes a valuable contribution.

Do you want to look behind the scenes of IT security and IT regulators and actively participate? Are you cool when you hear OWASP, WSTG, CVSS, CWE, CIS, SDLC, CI/CD, SBOM, ISO27K1 and DORA? Then introduce your know-how and actively shape it: Technical and technical development of our IT security vulnerability management with primary focus on pentesting and code security Planning and operational support of external Pentests, evaluation of their results and introduction of corrective measures Design, coordination and monitoring of system curing measures Further development of established security measures in the field of safe application development, monitoring their implementation Further development of our central system for detection and treatment of vulnerabilities from various technical resilience tests Analysis of process weaknesses and development of optimization measures, as well as accompanying their implementation Design of security measures and accompanying their implementation in various IT projects

You fit us and this challenging position when you bring the following: Completed studies or training in computer science, alternatively multi-year professional experience in IT Practical experience in pentesting or safe application development (e.g. Gitlab, Sonarcube Nexus IQ) desirable Excellent understanding of IT security and project experience Knowledge of industrial standards (e.g. ISO27K1) and regulatory framework (e.g. DORA) Consultancy and pronounced conceptual and analytical skills A way of working, characterized by partnership, appreciation and enthusiasm and team spirit Secure and address-oriented communication across hierarchical levels We also welcome diverse educational backgrounds and work experiences. We are open to talents whose CV at first glance does not fit 100% with the requirements in our job ad. We are looking for the best candidates for this job and offer them the right framework conditions to fully develop their individual potentials.

In addition to our attractive work environment, there are also numerous other benefits and social benefits such as Mobile and flexible work Free Germany Ticket as a Job Ticket Attractive operating restaurants and coffee bars at Frankfurt and Luxembourg locations Granted lunch Free drinks at work Occupational pension Assets Employee conditions within the framework of the cooperative financial association Childcare allowance Various offers on the topics of fitness and health (e.g. Wellpass, Internal Sports and Health Care) Various leasing offers (e.g. bicycle or tech leasing) Further education Modern working environments, including a first-class IT equipment and much more! Benefits may vary according to company and location. .