Job
In this role, you will develop a comprehensive patch and vulnerability management framework, implement security standards, and optimize communication between IT operations and security teams.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Strategic and conceptual development of the company-wide patch and vulnerability management framework in alignment with ISMS requirements.
- Definition and enforcement of SLAs, KPIs, and risk tolerances for vulnerability remediation across all system landscapes.
- Development of policies, security standards, and exception management processes.
- Development, prioritization, and management of a transparent patch management roadmap.
- Leading strategic security initiatives to improve the maturity of patching and deployment cycles.
- Tracking implementation status and regularly reporting to the CISO, IT leadership, and risk management.
- Close collaboration with system and network administrators, cloud architects, DevOps teams, and the respective business application owners to implement security requirements pragmatically and effectively.
- Moderation of conflicting priorities between IT availability/operations and regulatory patching deadlines.
- Documentation and traceability of patch processes in accordance with regulatory requirements (e.g., audit readiness, evidence collection for certifications).
Our expectations of you
Education
- Successfully completed a degree in (business) informatics, cyber security, information security, or a comparable qualification combined with substantial professional experience.
Qualifications
- Sound, proven practical knowledge of common security standards such as ISO/IEC 27001, BSI IT-Grundschutz, or NIST CSF / SP 800-40.
- Relevant certifications are an advantage (e.g., CISM, CISSP, CRISC, ISO 27001 Lead Implementer / Auditor).
- In-depth technical understanding of modern patch and vulnerability management strategies (risk-based vulnerability management, zero-day handling, ring deployments).
- In-depth understanding of essential IT infrastructure (Windows Server, Linux distributions, virtualization, network components, cloud platforms, and container technologies).
- Strong facilitation and communication skills to clearly convey technical risks to management and engage operational teams in security topics.
- Fluent in German and English, both written and spoken.
Experience
- Several years of experience leading complex IT security projects or working as a Project / Program Manager at the intersection of IT operations and security governance.
- Ideally, practical experience as an Information Security Officer (ISO / CISO), ISMS auditor, or in a comparable governance role.
Benefits
Work-Life-Integration
Health, fitness & fun
Topics you will work on
Job locations
About your employer
The Schwarz Group, based in Neckarsulm, is a significant German conglomerate and one of the largest retail groups in Europe. It operates over 13,900 stores under the brands Lidl and Kaufland and employs around 575,000 people.
- Established Company
- Onsite, Hybrid, Full Remote
- Trade
More jobs
These jobs might also interest you
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...
Consultant & Project Manager – You are the primary contact for our clients and take on the leadership of new projects. Optimize processes & create added value – With your expertise, you will design more efficient workflows and support our clients with...