Beschreibung

In this role, you will lead the centralized Information Security Operations, ensuring robust security measures and compliance across the organization. Your day-to-day responsibilities will include managing a dedicated team, overseeing external partners, and enhancing cyber resilience through strategic initiatives.

Anforderungen

• •7+ years in Information Security
• •At least 3 years in leadership roles managing SOC, Vulnerability Management, or Incident Response
• •In-depth knowledge of AWS and Azure security controls
• •Knowledge of cloud-native security concepts
• •Knowledge of container security (Kubernetes)
• •Strong familiarity with SIEM, SOAR, EDR/XDR, vulnerability scanners, and network security controls
• •Experience with industry standards (e.g., ISO 27001, SOC 2, MITRE ATT&CK)
• •Experience with regulatory frameworks (e.g., GDPR, DORA, NIS2)
• •Proven ability to manage MSSPs and external security vendors
• •Experience with contract negotiations and SLA management
• •Excellent negotiation and communication skills
• •Fluency in English
• •German is a plus
• •Certifications (CISSP, CISM, CEH, GCIA, etc.)
• •Experience with cloud security (AWS / Azure)
• •Experience in regulated environments (ISO, NIS2, SOC)

Aufgaben

• •Establish and manage centralized Information Security Operations
• •Oversee external MSSP partners for 24/7 SOC monitoring
• •Lead threat detection and incident response efforts
• •Implement vulnerability management and penetration testing
• •Define service levels and ensure compliance with security policies
• •Manage the central budget and implement a consumption-based recharge model
• •Provide unified reporting with consolidated KPIs to the Board
• •Enhance cyber resilience through continuous improvement and automation
• •Oversee central vulnerability scanning and coordinate remediation
• •Run monthly phishing campaigns to improve security awareness
• •Conduct annual training programs for organizational security awareness
• •Lead a central team and interface with local IT teams and vendors

Tools & Technologien

Benefits