Job
In this role, you lead information security in four hospitals, advise on risks, create security concepts, analyze incidents, and support IT projects by integrating security aspects throughout various project phases.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- As ISB, you will take on the professional leadership of information security in the four hospitals in the West region (Duderstadt, Hannover, Hildesheim, and Salzgitter) of the Elisabeth Vinzenz Group.
- You assist the CISO in elevating the security level of the branches to a centralized standard.
- You are the primary contact for the management board as well as other relevant stakeholders of the hospitals on all issues related to information security, advising on risks, measures, and priorities, and ensuring the effective implementation of security requirements in the region.
- You advise on technical, procedural, and organizational issues of information security.
- You develop security concepts, analyze risks, and support the development of information management systems (ISMS) according to standards such as ISO 27001 and B3S.
- You conduct observations in the clinical departments.
- You are in close contact with the staff of the station/functional services as well as the performance departments and are the primary contact person (m/f/d) for security issues.
- You apply your expertise strategically to tackle current challenges such as clinical data transmission and the implementation of requirements like NIS2.
- You ensure compliance with legal and normative requirements regarding NIS-2 and B3S in medical care.
- You actively participate in company-wide IT projects and manage/monitor the integration of security aspects across various project phases.
- You analyze and assess security-related incidents and conduct risk analyses.
- You analyze and evaluate new software and hardware in accordance with internal guidelines.
- You assist in the development of information security concepts and policies.
- You assist in the implementation of a Business Continuity Management System (BCM).
- You conduct internal audits independently and accompany external audits.
- You conduct occasion-specific awareness training.
- You are prepared for business trips within your region and occasionally nationwide in Germany.
Our expectations of you
Education
- A completed degree (e.g., Medical Informatics, Medical Technology, Computer Science, IT Security, Security Management, Business Informatics) or a comparable qualification with relevant professional experience in information security.
Qualifications
- Strong communication skills and enjoyment in conveying even complex matters simply and convincingly.
- Negotiation-proficient and resilient demeanor.
- Certifications such as CISSP, CISM, CEH, OSCP, OSCE, CompTIA+, Internal Auditor / Lead Auditor, BSI Implementer / Consultant, or similar are a plus, not a requirement.
- Know-how in the conception and evaluation of technical security solutions is a plus, not a must.
Experience
- Experience in consulting on ISMS as well as in the application of standards such as ISO 27001, BSI IT-Grundschutz, and regulations like NIS2, B3S, and KRITIS.
- Experience in supporting audits and a strong understanding of IT risks.
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Der Elisabeth Vinzenz Verbund (EVV) gehört bundesweit zu den größten christlichen Trägerverbünden von Krankenhäusern und weiteren Einrichtungen im Gesundheits- und Sozialwesen mit 15 Krankenhaus-Standorten in sieben Bundesländern.
- 2014
- Established Company
- Hybrid, Onsite
- Healthcare, Social Sector
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
