Job
In this role, you will be responsible for establishing and developing the information security management system, conducting risk analyses, creating security policies, and training employees on information security.
This listing has been machine translated. Show original
Your role in the team
- Independent development, operation, and continuous improvement of our Information Security Management System (ISMS) (e.g., according to ISO 27001, BSI Basic Protection, KRITIS-B3S, NIS2).
- Professional consulting of executive management and specialist departments on all issues related to information security.
- Development, maintenance, and enforcement of security policies, processes, and technical as well as organizational measures.
- Planning and conducting risk analyses, internal audits, and security assessments.
- Monitoring and implementation of legal and regulatory requirements (including GDPR, IT Security Act).
- Coordination and communication with external auditors, authorities, and service providers.
- Management of security incidents including analysis, derivation of measures, and follow-up.
- Participation in the development and maintenance of emergency, incident response, and business continuity plans.
- Awareness and training of employees in the field of information security.
Our expectations of you
Education
- Completed degree in Computer Science, IT Security, or a comparable qualification.
Qualifications
- Excellent knowledge of relevant standards and frameworks (e.g., ISO 27001, BSI IT-Grundschutz).
- Strong communication and consulting skills, even with complex issues.
- Structured, independent, and solution-oriented way of working.
- Very good German and good English skills, both written and spoken.
Experience
- Several years of practical experience in information security / ISMS / IT risk management.
- Experience in collaborating with management, departments, and external auditors.
What we offer
- Permanent employment contract.
- Flexible working hours and remote work / home office (up to 40%).
- Part-time work also possible (from 20 hours).
- 30 days of vacation.
- Tariff-based salary, holiday pay, and annual special payment.
- Economics and company pension scheme.
- Corporate Benefits Platform: Attractive Employee Discounts.
- Diverse, exciting tasks and active opportunities for shaping.
- Integration into a friendly and dynamic team.
- Space for ideas and personal development.
- Further education in the field of Information Security (ISB).
- Flat hierarchies & fast decision-making processes.
- A secure job in a stable family-owned company.
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Die Krieger-Gruppe verbindet die Teilnehmer in der Gesundheitsbranche. Das Mutterunternehmen C. Krieger & Co. Nachfolger GmbH & Co. KG ist, als ältester pharmazeutischer Großhandel in Deutschland, das Schwergewicht in der Gruppe.
- 50-249 Employees
- Established Company
- Onsite, Hybrid
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
