Local Information Security Officers (w/m/d)
Core
Responsible for the information security of Korian Germany's ~240 facilities and ambulatory services within the KRITIS environment, reporting directly to the Chief Digital & Information Officer.
Role type
Senior Information Security Officer (KRITIS/NIS2)
Builds
Information Security Management System (ISMS) aligned with ISO 27001/NIS2, security architecture for IT/OT, and incident response capabilities.
Domain
Healthcare / Critical Infrastructure (KRITIS) / Cybersecurity
Required skills
NIS2 compliance, ISO 27001 implementation, Security Governance, Cloud security (SaaS/IaaS/PaaS), IAM (Microsoft Entra ID), Network security (SD-WAN, Firewall), Incident management, Secure Software Development, Risk assessment, Contract security review.
Preferred skills
CISSP, CISM, ISO 27001 Lead Auditor/Implementer, French language.
Technologies
Microsoft Entra ID, SD-WAN, EDR, Cloud (SaaS/IaaS/PaaS), OT systems.
Responsibilities
Ensure timely fulfillment of NIS2 reporting obligations and develop ISMS; define security standards and reference architectures for IT and OT; build security incident and emergency management processes; set security requirements for applications and in-house developments; drive reduction of security risks and audit findings; translate group security policies to the German context and report KPIs.
Seniority
Senior, hands-on IC