Business Information Security Officer (BISO)

Do you want to keep, expand and modernize the 36,000-kilometre-long Berlin power grid together with us? Do you want to be fully committed to our 3.7 million customers and to a sustainable urban society? Then support us as soon as possible Business Information Security Officer (BISO) in the team Processes & Digitization in the area of Customers & Markets in Berlin-Treptow. We are electricity grid Berlin. As a co-designer of the energy transition, we keep the city running, give it energy and bring it to light. You can find out more about us here: About us - Stromnetz Berlin Energy management focuses on customer focus and digitization. The customer & markets division forms the input channel for all connection requests and controls them structured by the company. In addition, the sector is responsible for 1.5 billion annually. EUR Network usage accounting, implements the rollout of intelligent measuring systems in the role of the measuring point operator and creates the conditions for controlling our network customers. The Processes and Digitization team continuously develops and develops the end2end processes in the field of customer & markets and actively promotes digitization, automation and data-based control. Another focus of the working group is on the design and further development of information security in the area of customers & markets – focusing on the two departments customer management and market partner service as well as on the area management. You develop strategies and IT concepts and ensure their effective implementation. You work closely with the central security organization and specialist departments.

Implementation of the requirements and processes of information security in the area of customers & markets, with the focus on customer management and market partner services as well as on the area management Management of risk management for information security and independent implementation of protection and risk analyses Support of projects and tenders with regard to information security and appropriate control of external service providers Ensuring the professional control of (partial) projects in the context of information security and their targeted implementation. Active introduction of their own expertise in cross-departmental ISMS boards and bodies. Responsibility for planning, coordination and monitoring of internal and external audits, including ensuring the implementation of derived measures. Ensure the implementation of the data policy in accordance with regulatory requirements and information security requirements. expert and process advice on the ISMS topics as well as targeted training and awareness-raising measures. Function as a central contact person for the security incident care areas as well as close cooperation with the Business Continuity Management and other security organization units. Regular reporting to the field management and the CISO to the stage of implementation and to the effectiveness of the ISMS as part of its own tasks. Support of the central ISMS organization through the participation in overarching projects and the further development of ISMS guidelines, processes and specifications. Continuous observation of trends and legal developments in the area of information security to round off the task profile.

completed high-level or university studies in information technology, electrical engineering, information security management or a comparable degree. multiannual professional experience in the field of information security with well-founded professional expertise, ideally in the role of information security officer or in a comparable function. pronounced communication and moderation strength for addressable communication of complex facts. Experiences in cooperation with interdisciplinary teams and stakeholders at different hierarchical levels. Knowledge of relevant methods, products and services in the field of information security. Confidence with common security standards and standards as well as established security best practices. Practice-proven competence in the implementation of risk analyses, the creation of security concepts and in the handling of security incidents and audits. Plus no need: CISSP, CISM, CISA, T.I.S.P., CRISC, ISO 27001 Lead Auditor and / or BSI IT Basic Knowledge of regulatory safety requirements in the KRITIS environment. Experience in emergency management/BCM.

Work-Life-Balance: We support the reconciliation of family, leisure and work, e.g. through flexible working hours at a 37h week, 30 days holiday/year, work-free days on Christmas and New Year's Eve and an annual work-time account. Personal development: We promote your personal development (e.g. through development talks) and support you through individual training measures and offer you an extensive range of health promotion. Working environment: We will provide you with an environment with a lot of design space for your own initiative and independent action as well as an open communication culture. Health: Because your health is at our heart, we have implemented a variety of health management and support you in health-promoting activities such as fitness studio membership. Financial security: You will receive an attractive tariff entry fee between € 75T - € 109T in a crisis-proof company. By deviating personal conditions, a grouping can also take place lower at the beginning. Benefit from further services such as a grant to the company ticket AB, a discounted lunch and a job-wheel leasing and an occupational pension scheme. Location Berlin: Through our cooperation with a Berlin housing company, we support you in the fast arrival in Berlin, if you need to move to Berlin for the job.

Colorful – exciting – diverse – Berlin. We are convinced of diversity and inclusion. Applications from people of all ages, gender identity, sexual orientation and migration history are welcome. Since we have set ourselves the goal of equal opportunities and the professional promotion of women, we are particularly interested in women's applications. Persons with disabilities are particularly taken into account with the same professional suitability. .