Job
In this role, you will enhance the information security management system, advise departments, conduct risk analyses, support incident management, and assist with training and audits.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- As an Information Security Officer, you will play a central role in the development and coordination of the IHP's information security, with administrative and scientific responsibilities.
- They advise departments, design processes, and work together with colleagues from administration, research, and IT to ensure a structured and practical information security management.
- Support of the IT department in implementing and documenting IT security requirements.
- Assumption of the role of Information Security Officer (ISO).
- Maintenance, review, and continuous improvement of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001.
- Further development and maintenance of security policies, concepts, and documentation for various organizational units.
- Consulting the institute management and specialist departments on strategic and operational aspects of information security.
- Conducting protection needs assessments and risk analyses, as well as planning and coordinating appropriate measures for risk mitigation.
- Close collaboration with institute management, data protection officers, IT managers, and project leaders to ensure comprehensive implementation of security requirements.
- Support in handling security incidents and in the further development of emergency plans.
- Planning and implementation of training sessions as well as awareness-raising measures.
- Preparation and support of internal and external audits as well as participation in certification processes.
Our expectations of you
Education
- Completed degree, e.g., Information Security, Security Management, Computer Science, Business/Administrative Informatics, or a comparable qualification.
Qualifications
- Knowledge of common standards and frameworks in the field of information security (e.g., ISO/IEC 27001 or BSI IT-Grundschutz).
- Advantage: Understanding of processes and IT systems in public administration as well as in research institutions.
- Strong sense of responsibility and an independent, solution-oriented work approach.
- Ideally relevant certifications (e.g., ISO 27001 Lead Implementer, CISSP, CISM) or the willingness to obtain them.
- Good German and English language skills, both written and spoken, as well as strong communication and consulting skills at all levels, from IT professionals to institute management.
Experience
- Initial experience in implementing information security measures in organizations with both administrative and scientific structures.
What we offer
- Work in the public sector, in a state-of-the-art and dynamic research environment.
- Actively shape information security at IHP and make an important contribution to forward-looking research projects!
Benefits
Work-Life-Integration
Health, fitness & fun
Food & drink
Higher take-home pay
Topics you will work on
Job locations
About your employer
The Leibniz Association represents 97 independent research institutions. The member institutions' areas of expertise are very diverse, ranging from the natural, engineering and environmental sciences, to the economic, spatial and social sciences, and the humanities.
- 250+ Employees
- English
- Established Company
- Onsite, Hybrid
- Science, Research
Employer reviews
- Engineering
- 3.2
- Career growth
- 3.1
- Team culture
- 3.9
- Working conditions
- 4.4
More jobs
These jobs might also interest you
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...