Data Engineer
Core
Responsible for information security within the business unit, driving ISMS development, risk analysis, and compliance with regulatory requirements.
Role type
Information Security Officer (GRC focus)
Builds
Security policies, documentation, and compliance frameworks
Domain
Information Security / IT Governance / Compliance
Deliverable
dashboards & analysis
Required skills
Risk management, ISMS implementation, regulatory compliance analysis, security incident handling, audit planning, policy development
Preferred skills
CISSP, CISM, CISA, ISMS Auditor certifications
Technologies
ISO 27001, NIS2, CRA, COBIT, ITIL, ISA 3402
Responsibilities
Oversee information security within the business unit, analyze risks and derive security measures, identify and evaluate security-relevant processes, support IT procurement with security assessments, conduct internal audits and support external audits, create and maintain security policies and documentation, clarify regulatory requirements, ensure service class certification and data integrity, advise top management on security topics.
Seniority
Mid-Senior, hands-on IC