Kiwa Deutschland GmbH | Germany | 20xxx Hamburg | Permanent position | Full time / Home office | Published since: 08.04.2026 on stepstone.de
Security Engineer Governance & ISMS (m/f/d)
At Kiwa, technology, precision, safety and quality are the focus. With a dedicated team of over 9,500 people in more than 40 countries, we offer you diverse professional challenges. Our work focuses on quality checks, certifications and environmental services. To strengthen our IT team, we are looking for a dedicated and structured personality as a security engineer (m/w/d)! As a Security Engineer (m/w/d), you take over the technical development of our IT security architecture as well as the operational implementation of group-wide security requirements at the site. They combine technical know-how with structured approach in the ISMS environment and act as a central interface between IT operations, management and corporate security. Security Engineer (m/w/d)
* After clicking the Read more button, the original advert will open on our partner's website, where you can see the details of this vacancy and contact information. If you need a translation of this text, after returning to our website it will be prepared and you can read it by clicking the Show full translation button.
Your tasks • Your profile • What we offer
Assessment, development and curing of existing security architecture (network, firewall, segmentation, IAM) Independent analysis and evaluation of backup and recovery strategies taking into account threat scenarios Introduction, evaluation and further development of security solutions (e.g. EDR, SIEM, MFA, Monitoring) Technical management and coordination of incident response measures implementing technical risk analyses and deriving structured measures Proactive identification of structural security risks in complex IT environments Implementation and effective anchoring of Group-wide security policies at the site Active participation and further development of the ISMS Preparation, coordination and supervision of internal and external audits (e.g. TISAX, ISO 27001) Support for the implementation of regulatory requirements (e.g. NIS2) Translation of technical risks into management basis Creation of structured reports for IT management and group
Completed study of computer science, IT security or comparable training with several years of relevant professional experience At least 4-5 years of practical experience in the field of IT security or in complex IT infrastructures Found experience in the evaluation and design of security architectures Very good understanding of network technologies (VLAN, Segmentation, Firewalls), IAM concepts as well as backup and recovery strategies Experience in the evaluation, introduction or further development of modern technical safety measures (e.g. endpoint protection, detection and monitoring solutions, IAM, network segmentation) Practical experience in audit-related or regulated environments (e.g. ISO 27001, TISAX, NIS2) Very good knowledge of German and English Ability to implement technical risks in a structured manner and in business impacts Designed analytical and systemic thinking High self-sufficiency as well as a structured and documentative way Sovereign communication skills to IT, departments, management and group High integrity and sense of responsibility
Flexible working hours & hybrid work (Workplace Hamburg – not a full-remote) 30 days of holiday/year Occupational pension Cost of travel Service leasing offer Numerous employee benefits and premiums Wellpass membership for fitness, sports and wellness services A lot of fun on regular employee events Interesting further development possibilities through internal trainings and training offers Future-proof and promising opportunity to grow with us in a successful company Best team spirit through creative, motivating coexistence and trusting cohesion across all hierarchy levels
Contact
![]() | Kiwa Deutschland GmbH | |
| Finkenweg 7, 20097 Hamburg | ||
| Germany | ||
| show e-mail |
The text of this ad was translated from German into English using an automatic translation system and may contain semantic and lexical errors. Therefore, it should be used for introductory purposes only. For more detailed information, see the original text of the ad at the link below.
For more information read the original ad