Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Part Time/Full Time
- Contract Type
- Permanent employment
- Salary
- 62.000 to 72.000€ Gross/Year
- Location
- Paderborn
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop our security strategy, enhancing our information security management system. Your responsibilities include risk assessments, employee training, audits, and providing support to management and various departments on security-related issues.
Your role in the team
- You will be the architect of our security strategy by expanding and maintaining our comprehensive Information Security Management System (based on VDA®-ISA / TISAX®).
- The continuous review and updating of our information security policy and the management of the implementation of information security measures are within your responsibility.
- You act as a sparring partner for our management in all matters related to information security, including risk analysis, monitoring, and reporting.
- You support the sales department with questions related to information security in connection with tenders and system or solution extensions.
- You are the point of contact for clients, external auditors, and the development and operations departments regarding internal or external penetration tests (WASA).
- You will ensure the quality of our service providers by conducting comprehensive assessments.
- Raising employee awareness of information security is a key part of your role, so you will ensure that information security is embedded in all areas of the company through internal training.
- You improve the efficiency and quality of our IT services in the context of information security by modeling and optimizing processes.
- You are responsible for handling security incidents in collaboration with the affected departments and ensuring the security of emergency management.
- The initiation and monitoring of technical and organizational measures (TOMs) are also part of your responsibilities.
- You are the central point of contact for the Data Protection Officer to ensure data protection compliance in all information security measures.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in Computer Science, Information Technology, or a comparable field of study
Qualifications
- Additional certifications in information security and IT service management (e.g., TISAX, BSI, ISO) are advantageous.
- Knowledge related to SOX compliance is desirable.
- Solid knowledge in conducting service provider audits and handling tenders in the field of Information Security context.
- Strong communication and consulting skills, especially in dealing with clients and internal stakeholders.
- Independent working style and the ability to succeed in a dynamic environment
- Good knowledge of relevant IT technologies and infrastructures
- Excellent spoken and written proficiency in German and English.
- Fluent German is necessary.
Experience
- At least 3 years of experience in similar roles, particularly in the information security environment.
- Experience in the implementation and management of Information Security Management Systems (ISMS)
- Experience in preparing and conducting internal and external audits
This text has been machine translated. Show original
What we offer
- €0 - €72,000 per year
- Home office possible
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
Wps Management Gmbh
At WPS Management, we bring together experts in digital business processes, electronic purchasing, and connecting people and systems. Together, we strive to support multinational companies in implementing and digitizing their procurement strategies through innovative technologies and methods. We are committed to helping our clients succeed in the ever-changing landscape of business.
Description
- Language
- English
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication