Job
- Level
- Senior
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Project, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will develop a strategic vendor ecosystem and evaluate security service providers. This includes managing third-party risks, conducting security assessments, and developing KPIs to improve security maturity.
Job Technologies
Your role in the team
- Development and expansion of a strategic vendor ecosystem in the field of CyberSecurity.
- Assessment and selection of security service providers and technology partners.
- Conducting third-party risk assessments and security evaluations.
- Management and monitoring of security requirements towards suppliers.
- Development and monitoring of KPIs, SLAs, and vendor scorecards.
- Support in contract negotiations with a focus on security and compliance requirements.
- Collaboration with internal stakeholders such as IT security, procurement, legal, and compliance.
- Conducting supplier audits as well as supporting regulatory inspections.
- Identification and implementation of improvement measures to increase the security maturity of partners.
- Monitoring current cybersecurity trends and regulatory requirements (e.g., NIS2, DORA, ISO 27001).
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in Computer Science, IT Security, Business Informatics, or a comparable qualification.
Qualifications
- In-depth knowledge of relevant security standards and frameworks (e.g., ISO 27001, NIST, CIS).
- Verifiable successes in the sales of security technologies from the SOC and OT environment.
- Good technical understanding of cybersecurity technologies (e.g., IAM, SIEM, Cloud Security, Endpoint Security).
- Independent and self-responsible work.
- Strong analytical and strategic thinking skills.
- Excellent communication and presentation skills.
- Strong negotiation skills and assertiveness.
- Ability to communicate complex technical topics clearly.
- Structured and solution-oriented way of working.
- Teamwork skills as well as confident stakeholder management.
- Active network with resellers.
- Certifications such as CISSP, CISM, CRISC, or ISO 27001 Lead Auditor.
Experience
- Several years of experience in Vendor Management, Third-Party Risk Management, or Cybersecurity environment.
- Experience in dealing with regulatory requirements (e.g., GDPR, NIS2, DORA).
- Experience in contract and SLA negotiations with IT or security service providers.
- Experience in regulated industries (e.g., financial sector, critical infrastructure, telecommunications).
- Experience with international supplier structures.
This text has been machine translated. Show original
What we offer
- A responsible role in a rapidly growing CyberSecurity environment.
- Participation in innovative security solutions and strategic customer projects.
- Attractive compensation with performance-based components.
- Flexible work models and a modern working environment.
- Individual training and development opportunities.
- Collegial and innovation-driven team.
- Attractive employee discounts through Corporate Benefits.
This text has been machine translated. Show original
Topics You Will Work On
Job Locations
About Your Employer
Ectacom Gmbh
Die ectacom GmbH ist ein mittelständisches Unternehmen was von dem Vertrauen seiner Geschäftspartner und der Professionalität seiner Mitarbeiterinnen und Mitarbeiter lebt. Und solange Geschäfte zwischen Menschen getätigt werden, solange wird die ectacom GmbH nachhaltig wachsen und auf Menschen und Talente setzen, die Teil eines sympathischen und erfolgsorientierten Teams sein wollen.
Description
- Founding Year
- 1999
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication