Information Security Officer (Expert) (m/f/d)

Responsibility for the key topic of ICT third-party risk management or ‘information and IT security audits’: Strategic further development and control of your own subject area in coordination with the ICT risk control function Conception, updating and monitoring of policies, methods and processes taking into account regulatory requirements and standards Planning, implementation and documentation of auditing, monitoring and effectiveness audits Assessment of deviations, follow-up of measures and transfer of identified security risks to ICT risk management Reporting and drawing up decision templates for ICT risk control function, management level and bodies Advising specialist areas and stakeholders in the area of focus

Analysis of the relevance and impact of laws and regulatory requirements of information security and deriving internal measures Participation in ICT risk and safety incident management as well as in information security and digital operational resilience projects Monitoring of external audits and regulatory enquiries Coordination with relevant stakeholders of information security

Complete university studies (informatics, business informatics, economic engineering, economics) or a comparable qualification Multiannual relevant professional experience in IT/information security or in ICT third-party risk or Disposal management Very good knowledge and experience in implementing legal requirements and standards of information security and/or third party risk management, including ISO 2700x, Digital Operational Resilience Act (DORA) and EBA guidelines Embossed understanding of/expertise in the field of information security, audits and/or third party risk/outsourcing management, ideally detectable by recognised certifications Analytical, conceptual thinking and structured and solution-oriented working methods as well as team skills Impressed ability to prepare complex facts concisely and to communicate them correctly (including reporting) Sovereign appearance in dialogue with internal and external contact persons, including service provider control or Test situations High self-initiative, sense of responsibility and willingness to advance themes independently (hands-on mentality)

Perspective: diverse career opportunities with attractive remuneration, occupational pensions and other occupational benefits Development: technical and personal support through individual training opportunities Work-Life-Balance: flexible working time design with currently 31 days vacation Working environment: ergonomically equipped workplaces and the possibility of mobile work Health: versatile health and fitness services - digital & on site Corporate culture: estimating and collegial cooperation with space for active participation of our company Mobility offers: Jobrad-Leasing, mobility grant and affordable parking Extras: discounted food in your own canteen or Food aid