Chief Information Security Officer (CISO) / Informationssicherheitsbeauftragter (m/w/d)
Core
Strategic leadership of information security, building and maintaining an ISMS, and ensuring compliance with regulatory requirements at a university hospital.
Role type
Senior IC CISO (Information Security Officer)
Builds
Information Security Management System (ISMS) aligned with BSI IT-Grundschutz and ISO 27001
Domain
Healthcare + Cybersecurity / IT Governance
Required skills
Strategic security planning, ISMS management, Risk management, Regulatory compliance (KRITIS, NIS2, GDPR), Security incident coordination, Security awareness training
Preferred skills
CISM, CISSP, CRISC, ISO 27001 Lead Implementer/Auditor, BSI IT-Grundschutz Practitioner/Consultant
Technologies
ISO 27001, BSI IT-Grundschutz, NIS2, KRITIS
Responsibilities
Develop information security strategy and derive security goals from corporate strategy and regulatory requirements; Build, operate, and continuously develop the ISMS; Steer information security risk management and prepare risk treatment decisions for the board; Ensure implementation of regulatory requirements; Report regularly on security status, risks, measures, KPIs, and major incidents to the board; Advise the board, leadership, IT, medical technology, and departments on security and cyber-resilience; Coordinate security incidents, reporting processes, and improvement measures; Develop security awareness, security culture, and targeted training measures
Seniority
Senior, hands-on IC with strategic oversight