Job Description
You really want to shape big things? Here you are – be part of the company's central Cybersecurity team where you have the chance to further develop our ISMS incl. reporting landscape. In this role you
- Define, maintain, and continuously improve rules, procedures, and processes in the ISMS considering internal and external requirements.
- Take over Lifecycle Management of Cybersecurity Rule Landscape
- Manage and evolve the regulatory landscape as an efficient and effective regulatory system for cybersecurity
- Implement and execute rule adherence measurement processes
- Execute Cybersecurity Assessments
- Exercise policy authority on the topic of cybersecurity
- Assess and process security exceptions
- Work with various data sources and to identify cyber risks within the organization
- Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization
- Further develop the IT Service framework for cyber risk management
- Actively track cyber risks, including evaluation of mitigation effectiveness
- Support the management of the company's external security posture
Qualifications
- Academic degree in a relevant field, equivalent Information Security certifications (e.g., CISM) are desired
- Several years experience in the field of Information Security Management Systems
- Comprehensive knowledge of IT infrastructure, cybersecurity, and industry standards (e.g., ISO27001, NIST, NIS2)
- Fluency in English (written and spoken)
- Experience in IT, process management, and Cybersecurity Governance
- Strong analytical skills and experience in defining cybersecurity governance
- Project Management Skills
- Interpersonal and intercultural skills to work with different stakeholders
If the key words Risk appetite, ISMS, PDCA and ISO27001 are familiar to you and you have the strong belief that Information Security is a business enabler, we look forward to your application!