Beschreibung

In this role, you will be at the forefront of information security, managing compliance certifications and leading incident responses. Daily tasks will involve coordinating audits, developing policies, and ensuring that security measures are robust and effective.

Anforderungen

• •Bachelor’s degree in Information Technology, Computer Science, or related field
• •4 to 6 years work experience in information security, compliance, or IT governance
• •Hands-on experience with ISO 27001 implementation and audits
• •Experience in TISAX requirements and automotive security standards
• •Strong understanding of risk management, threat modelling, and vulnerability management
• •Experience with penetration testing tools and methodologies
• •Knowledge of infrastructure hardening and application security best practices
• •Deep understanding of regulatory frameworks and audit processes
• •Experience maintaining compliance documentation and evidence
• •Excellent problem-solving and analytical skills
• •Strong verbal and written communication skills in English, German is a plus
• •Ability to work in a highly agile, fast-paced environment

Aufgaben

• •Implement and maintain ISO 27001 and TISAX certifications
• •Coordinate internal and external audit preparation
• •Maintain the Statement of Applicability (SoA) and evidence for controls
• •Ensure adherence to regulatory and contractual security requirements
• •Develop and maintain compliance documentation, policies, and procedures
• •Lead security incident response and document incidents
• •Conduct root cause analysis and follow up on corrective actions
• •Manage the end-to-end Business Continuity Planning (BCP) process
• •Maintain BCP documentation and conduct periodic drills
• •Activate BCP during major incidents or disruptions
• •Coordinate communication with stakeholders during BCP activation
• •Identify, assess, prioritize, and track security risks
• •Monitor execution of mitigation plans
• •Perform and review threat modeling for critical systems
• •Oversee data classification and define retention periods
• •Support infrastructure hardening and application security initiatives
• •Enhance the security playbook AI model for incident response
• •Plan and coordinate penetration testing and vulnerability assessments
• •Prioritize and follow up on mitigation of penetration test findings
• •Act as a security and compliance subject matter expert for customer-facing teams
• •Respond to security questionnaires and RFPs

Benefits