IT Security & Compliance Program Lead (m/f/d)
Core
Lead IT security and compliance as a unified program across all markets, tracking regulations, managing risk, and reporting to management.
Role type
Senior individual contributor IT security and compliance program lead
Builds
Security governance programs, compliance evidence, and risk registers for multi-country operations
Domain
Energy sector cybersecurity and regulatory compliance
Required skills
Information security governance, risk and compliance, cybersecurity regulation tracking, supplier security assessment, incident reporting, security policy management, security training organization, audit evidence preparation, penetration test scoping, business continuity planning
Preferred skills
NIS2 or KRITIS regulation experience, ISO 27001 or BSI IT-Grundschutz certification, CISM or CISA certification, energy/OT/IoT environment experience, business continuity expertise
Technologies
NIS2, KRITIS, ISO 27001, BSI IT-Grundschutz, SOC 2
Responsibilities
Run IT security and compliance as one program across all markets, Track cybersecurity regulation in each market and keep authority registrations current, Maintain the risk register and report to management quarterly, Assess critical suppliers and security terms in contracts, Own incident reporting as escalation contact for managed SOC, Own security policies and test key controls, Organize security training for management and awareness for all employees, Provide security evidence for tenders and audits, Scope and steer external specialists for penetration tests, Act as IT contact for business continuity and crisis management
Seniority
Senior, hands-on IC