Job
- Level
- Experienced
- Location
- Wedel
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will be responsible for ensuring and developing a global security infrastructure, designing Zero-Trust Cloud architectures, and conducting risk analyses as well as audits.
Job Technologies
Your role in the team
- Responsibility for the secure operation as well as the continuous optimization and development of the global security infrastructure - including technical safeguards, operational standards, and traceable security documentation.
- Design and continuous development of secure cloud architectures based on Zero-Trust principles, including identity, authorization, network, and data privacy controls in a global corporate environment.
- Conducting and documenting security requirement assessments, risk analyses, and security architecture reviews, as well as deriving prioritized measures based on recognized standards and frameworks, in particular BSI IT-Grundschutz, NIST Cybersecurity Framework, and CISA Cybersecurity Performance Goals.
- Planning and implementation of company-wide IT security projects as well as the further development of the security architecture throughout the entire lifecycle - from governance and prevention to detection and response to recovery.
- Planning, execution, and monitoring of internal and external audits and control assessments; structured follow-up of findings as well as implementation and effectiveness review of agreed corrective actions.
- Independent development, implementation, and maintenance of security policies, standards, and processes, as well as translating regulatory and contractual requirements into verifiable technical and organizational controls.
- Consulting internal teams on security requirements and close collaboration with network, infrastructure, cloud, support, and application teams, especially in hardening, vulnerability management, logging and monitoring, as well as handling security incidents.
This text has been machine translated. Show original
Our expectations of you
Education
- Degree in Business Informatics, Information Security, or a comparable qualification with relevant practical experience.
Qualifications
- Knowledge in the areas of protection requirement and risk assessment as well as BSI IT-Grundschutz, NIST CSF, and CISA recommendations.
- In-depth knowledge of network, perimeter, and cloud security, especially firewalls, segmentation, Azure, and/or Google Cloud.
- Security in handling Windows / Linux security, endpoint security, EDR / MDR, vulnerability management, and monitoring.
- Knowledge in the implementation of IDM systems and deployment in a global corporate environment.
- Analytical, self-reliant working style as well as confident communication in German and English.
Experience
- Several years of experience in operational and conceptual IT security, ideally in a regulated, international environment.
- Experience with IAM, privileged permissions, MFA, Zero Trust, and security risk tracking.
- Experience with audits, control assessments, and incident response; ISO/IEC 27001 knowledge is a plus.
This text has been machine translated. Show original
What we offer
- Flexible and autonomous - in many departments, our employees can freely arrange their working hours and work up to 60% remotely.
- Rest and relaxation - 30 vacation days per year and holiday pay.
- Exceptional performance deserves special recognition - at medac, all employees participate in the company's success through performance-based bonus payments.
- Optimally prepared - with company pension schemes and asset-building benefits.
- Attractive additional benefits - from corporate benefits to accident insurance and external employee consulting.
- Individual Development - the medac Academy offers a versatile range of further and continuing education, including language courses and e-learning.
- Healthy food from regional cuisine - in our company restaurants in Wedel and Tornesch, there is a diverse selection of delicious dishes every day.
- Commuting by train to work - no problem, we subsidize the Deutschlandticket and offer BusinessBike leasing for maximum flexibility.
- Fit and healthy - we offer a wide range of sports activities and health services.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
medac GmbH
Die Medac Gesellschaft für klinische Spezialpräparate mbH is a German pharmaceutical company based in Wedel and Tornesch. 100% privately owned, Medac focuses on therapeutics for the treatment of oncological, urological and autoimmune diseases and their accompanying symptoms.
Description
- Founding Year
- 1970
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Pharmaceutical Sector, Chemical Industry, Biotech
Information Security Expert
- Location
- Wedel
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
