About this role
Job Description
You really want to shape big things? Here you are – be part of the company's central Cybersecurity team where you have the chance to further develop our ISMS incl. reporting landscape. In this role you
- Define, maintain, and continuously improve rules, procedures, and processes in the ISMS considering internal and external requirements.
- Take over Lifecycle Management of Cybersecurity Rule Landscape
- Manage and evolve the regulatory landscape as an efficient and effective regulatory system for cybersecurity
- Implement and execute rule adherence measurement processes
- Execute Cybersecurity Assessments
- Exercise policy authority on the topic of cybersecurity
- Assess and process security exceptions
- Work with various data sources and to identify cyber risks within the organization
- Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization
- Further develop the IT Service framework for cyber risk management
- Actively track cyber risks, including evaluation of mitigation effectiveness
- Support the management of the company's external security posture
Qualifications
-
Academic degree in a relevant field, equivalent Information Security certifications (e.g., CISM) are desired
-
Several years experience in the field of Information Security Management Systems
-
Comprehensive knowledge of IT infrastructure, cybersecurity, and industry standards (e.g., ISO27001, NIST, NIS2)
-
Fluency in English (written and spoken)
-
Experience in IT, process management, and Cybersecurity Governance
-
Strong analytical skills and experience in defining cybersecurity governance
-
Project Management Skills
-
Interpersonal and intercultural skills to work with different stakeholders
-
If the key words Risk appetite, ISMS, PDCA and ISO27001 are familiar to you and you have the strong belief that Information Security is a business enabler, we look forward to your application!