Referent Informationssicherheit / ISMS (m/w/d)
Core
Responsible for building, implementing, monitoring, and continuous improvement of the Information Security Management System (ISMS) risk management process.
Role type
Senior ISMS Information Security Risk Management Specialist
Builds
ISMS risk management processes and services for business units
Domain
Energy transmission / Information Security
Required skills
ISMS implementation, risk management process design, policy and standard creation, cross-functional risk coordination, management reporting, regulatory compliance (KonTraG, AI Act, KritisDG), ISO/IEC 27001/27005/31000, BSI IT-Grundschutz
Preferred skills
Enterprise Risk Management, Operational Risk Management, Compliance Risk Management
Technologies
ISO/IEC 27001, ISO/IEC 27005, ISO/IEC 31000, BSI IT-Grundschutz
Responsibilities
Define interfaces to adjacent risk management processes, identify and treat systemic information security risks, coordinate cross-functional risk cluster treatment, provide expert advice to management and OT/IT leaders, develop risk management services for business units
Seniority
Senior, hands-on IC