Information Security Unit / Information Security Officer (m/f/d)

You take over the function as “Information Security Officer” (m/w/d), i.e. you are responsible for all matters of information security within the KV Hamburg, are contact persons (m/w/d) for all employees and represent the KV Hamburg in the field of information security You are responsible for the operation of the established information security management system (ISMS), report to the Management Board and the business units about the status of ISMS and advise them on information security issues You develop and implement concepts and solutions that contribute to the achievement of the enterprise-wide information security objectives You initiate and monitor the development and implementation of processes and procedures to control, control, maintain and continuously improve information security You shall ensure that information security procedures support business requirements You coordinate the evaluation of information security-relevant events and the definition and implementation of the corresponding measures You work closely together with the other commissioners due to the integrated management system of the Kassenarzt Vereinigung Hamburg

You contribute to the further development of IT security architecture and formulate goals in coordination with the management Depending on the subject area, in consultation with the Heads of Division, you will assemble cross-disciplinary information security teams and are responsible for their professional management. You design and coordinate awareness and training on information security

You have a completed academic degree with a focus on information technology (e.g. computer science, business informatics or an economic/technical university degree with a focus on information technology) or on a comparable qualification You have gained experience in building, operating, developing or auditing information security management systems (ISMS) You have experiences with the requirements of the BSI-IT basic protection and the standards ISO 27001, ISO 27002, ISO 27003, ISO 27004 and ISO 27005 (knowledge and experience with the standard 22301 are of advantage) Relevant certifications in the field of information security such as CISSP, CISM, CISA are advantageous You have knowledge of classical and agile project management and have experience in project management Experiences with tools such as Jira, Confluence and ITIL, the Obashi method would be desirable. You are characterized by independent, structured and very careful work High operational readiness, team and service orientation are also characteristics that you are writing to yourself You have a very good analytical and systemic thinking capability You have good knowledge of German and English in word and writing Your profile is rounded off by good communication skills at all hierarchical levels

Safe workplace in an exciting and meaningful area of work Flexible working hours with sliding time and individual part-time models 30 days holiday and additional winter days Fair salary according to the collective agreement for the public service of the countries (TV-L) Very good connection to the ÖPNV and grant to the HVV Deutschlandticket Granted lunch in our own canteen Employee discount Health Management: Business Sports and Granted Membership at Wellpass Various training offers