Information Security Specialist (m/w/d)
Core
Develop and maintain the IT Information Security Management System (ISMS) per ISO/IEC 27001, manage operational risk, and implement NIS2/KRITIS regulatory requirements.
Role type
Information Security Specialist (ISMS & Risk Management)
Builds
ISMS policies, risk analysis frameworks, and regulatory compliance programs
Domain
Energy & Utilities (Stadtwerke Bonn)
Required skills
ISO/IEC 27001, risk management, ISMS implementation, NIS2/KRITIS regulations, incident management, stakeholder communication
Preferred skills
practical ISMS experience, awareness campaign planning, audit coordination
Technologies
ISO/IEC 27001, NIS2, KRITIS
Responsibilities
Develop and update ISMS policies and processes, moderate business impact and risk analyses, plan and execute security awareness measures, implement NIS2 and KRITIS regulatory requirements, support the Security Operations Center in incident and emergency management
Seniority
Mid-level, fixed-term (2 years)