Job
In this role, you will develop a strategic vendor ecosystem and evaluate security service providers. This includes managing third-party risks, conducting security assessments, and developing KPIs to improve security maturity.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Development and expansion of a strategic vendor ecosystem in the field of CyberSecurity.
- Assessment and selection of security service providers and technology partners.
- Conducting third-party risk assessments and security evaluations.
- Management and monitoring of security requirements towards suppliers.
- Development and monitoring of KPIs, SLAs, and vendor scorecards.
- Support in contract negotiations with a focus on security and compliance requirements.
- Collaboration with internal stakeholders such as IT security, procurement, legal, and compliance.
- Conducting supplier audits as well as supporting regulatory inspections.
- Identification and implementation of improvement measures to increase the security maturity of partners.
- Monitoring current cybersecurity trends and regulatory requirements (e.g., NIS2, DORA, ISO 27001).
Our expectations of you
Education
- Completed degree in Computer Science, IT Security, Business Informatics, or a comparable qualification.
Qualifications
- In-depth knowledge of relevant security standards and frameworks (e.g., ISO 27001, NIST, CIS).
- Verifiable successes in the sales of security technologies from the SOC and OT environment.
- Good technical understanding of cybersecurity technologies (e.g., IAM, SIEM, Cloud Security, Endpoint Security).
- Independent and self-responsible work.
- Strong analytical and strategic thinking skills.
- Excellent communication and presentation skills.
- Strong negotiation skills and assertiveness.
- Ability to communicate complex technical topics clearly.
- Structured and solution-oriented way of working.
- Teamwork skills as well as confident stakeholder management.
- Active network with resellers.
- Certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Auditor.
Experience
- Several years of experience in Vendor Management, Third-Party Risk Management, or Cybersecurity environment.
- Experience in dealing with regulatory requirements (e.g., GDPR, NIS2, DORA).
- Experience in contract and SLA negotiations with IT or security service providers.
- Experience in regulated industries (e.g., financial sector, critical infrastructure, telecommunications).
- Experience with international supplier structures.
What we offer
- A responsible role in a rapidly growing CyberSecurity environment.
- Participation in innovative security solutions and strategic customer projects.
- Attractive compensation with performance-based components.
- Flexible work models and a modern working environment.
- Individual training and development opportunities.
- Collegial and innovation-driven team.
- Attractive employee discounts through Corporate Benefits.
Topics you will work on
Job locations
About your employer
Die ectacom GmbH ist ein mittelständisches Unternehmen was von dem Vertrauen seiner Geschäftspartner und der Professionalität seiner Mitarbeiterinnen und Mitarbeiter lebt. Und solange Geschäfte zwischen Menschen getätigt werden, solange wird die ectacom GmbH nachhaltig wachsen und auf Menschen und Talente setzen, die Teil eines sympathischen und erfolgsorientierten Teams sein wollen.
- 1999
- Established Company
- Onsite, Hybrid
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
