Information Security Officer (m/w/x)
Core
Responsible for Information Security within the business unit, driving ISMS maintenance and continuous development.
Role type
Senior Information Security Officer (IT-GRC)
Builds
Security policies, compliance documentation, and audit readiness for business units.
Domain
Information Security / IT Governance, Risk, and Compliance (GRC)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Risk analysis, ISMS management, regulatory compliance (NIS2, CRA), security incident response, technical security concept evaluation, internal audit execution, policy creation, KPI definition, stakeholder management at C-level
Preferred skills
CISSP, CISM, CISA, ISMS Auditor certifications, experience in ISO-certified companies
Technologies
ISO 27001, NIS2, CRA, COBIT, ITIL, ISA 3402, Confluence
Responsibilities
Analyze risks and derive security measures, identify and evaluate security processes, support IT procurement with security assessments, plan and conduct internal audits, create and maintain security policies and documentation, advise top management on security topics, ensure service class certification and data integrity
Seniority
Senior, hands-on IC with strategic advisory
