Job
- Level
- Experienced
- Job Field
- IT, System, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Munich
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will be responsible for the IT security strategy, ensure compliance of our systems, develop security standards, and be the main point of contact for all security and data protection matters.
Job Technologies
Your role in the team
- As Manager of IT Security, Compliance & Data Security, you will play a central role in the information security and regulatory compliance of our company.
- You ensure that our systems, data, and processes meet the highest security standards and continuously develop our security strategy.
- You work closely with our Head of IT, management, and the specialist departments, actively driving topics such as IT security, data protection, governance, and compliance.
- You are responsible for the IT security strategy and its continuous development.
- You ensure that our systems, data, and processes are operated securely, stably, and in compliance.
- You are the central point of contact for IT security, compliance, and data protection topics with management, departments, and external partners.
- You work closely with our Head of IT in the further development of our IT and security landscape.
- You develop and implement security governance, policies, and security standards.
- You design and optimize cloud security architectures based on the Zero Trust principle.
- You are responsible for the deployment and further development of the Microsoft Security Stack (including Sentinel, Defender, Purview).
- You operate and further develop our Information Security Management System (ISMS) in accordance with ISO/IEC 27001.
- You ensure compliance with regulatory requirements such as NIS2, DORA, and TISAX.
- You conduct risk analyses and security assessments of third-party providers.
- You are responsible for incident, emergency, backup, and recovery management.
- You advise internal stakeholders on security, compliance, and data protection topics and promote a sustainable security awareness culture within the company.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Good knowledge of modern cloud platforms as well as cloud security concepts.
- Basic knowledge of AWS and GCP.
- Understanding of current developments around AI platforms and their secure usage.
- Very good German and English skills.
- Structured, autonomous, and solution-oriented way of working.
- Ability to communicate complex issues clearly.
- Strong initiative and enjoyment in taking responsibility.
- Knowledge of Microsoft Sentinel, Defender, and Purview.
- Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or equivalent.
Experience
- Several years of professional experience in IT Security, Information Security, or Cyber Security.
- Experience in establishing, operating, or developing an ISMS (ISO/IEC 27001).
- Experience with Microsoft 365 and modern workplace environments.
- Experience with Zscaler.
- Practical experience with NIS2, DORA, or TISAX.
This text has been machine translated. Show original
What we offer
- A diverse mix: we employ staff from over 18 countries.
- Intensive and structured onboarding with mentoring and a newcomer event.
- Flexible working hours, mobile and family-friendly working arrangements.
- Continuous investment in numerous external and internal training programs.
- Hybrid workplace model.
- Offices with excellent transportation links.
- Free drinks in the office - also for a joint wind-down after work!
- Additional benefits: anniversary bonuses, subsidies for your company pension scheme, your sports activities, your company bike, or a Germany ticket.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
Topics that you deal with on the job
Job Locations
This is your employer
infinIT.cx GmbH
When it comes to customer experience, we are the first choice in Germany. We advise, plan and operate complex contact centers and support you in all your customer experience issues. In doing so, we have more than 30 years of experience.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Manager IT Security, Compliance & Data Security
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
