Job
In this key position, you will develop a comprehensive information security strategy, optimize cybersecurity policies, and conduct regular audits and penetration tests to ensure the IT security of the infrastructure.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- In this key role, you will be responsible for the further development and implementation of our company-wide information security strategy.
- You ensure that our IT infrastructure, digital processes, and payment systems are protected as effectively as possible, and continuously develop our security standards.
- You develop a holistic information security strategy and ensure its implementation across the company.
- You are responsible for ensuring compliance with relevant regulatory and legal requirements, particularly GDPR and PCI DSS.
- Together with IT, you define cybersecurity policies covering system configuration, identity and access management, encryption, network segmentation, endpoint and malware protection, vulnerability and patch management, backup and recovery, logging and monitoring, threat detection, and technical data loss prevention (DLP) measures, and review their implementation.
- In collaboration with IT, you define guidelines for implementing IT projects and developing software, and review their implementation.
- You conduct regular penetration tests and vulnerability assessments and derive appropriate measures from them.
- You develop security concepts for our cloud environments, particularly Microsoft Azure and Microsoft 365.
- You conduct security assessments and audits and monitor the continuous improvement of our information security standards.
- You develop binding information security policies and establish standards for the secure handling of information systems and company data.
- You work closely with HR to establish a sustainable security culture across the company and deliver security awareness training to our employees.
Our expectations of you
Education
- You have completed a degree in computer science, business informatics, or an equivalent qualification.
Qualifications
- You have in-depth knowledge of information security and widely used information security frameworks (ISO 27001, BSI IT-Grundschutz, NIS2, GDPR), as well as experience applying them.
- You have a strong understanding of technology and continuously keep up with the latest developments, threat scenarios, and innovative security solutions.
- You stand out for your structured, analytical, and solution-oriented approach to work, as well as your strong sense of responsibility.
- You are flexible and confident in a dynamic environment with constantly changing market conditions and circumstances.
- You communicate confidently in German and have a very good command of English.
Experience
- You have several years of professional experience in information security and/or IT security, ideally in a retail environment.
What we offer
- A 38.5-hour workweek – flexible working hours within core hours.
- Monthly tax-free non-cash benefit via the SpenditCard.
- Work from home – up to 40% remote work, depending on the role.
- 30 days of vacation—for your well-deserved time off.
- Employee cafeteria – delicious subsidized lunch options at attractive prices.
- Employee discount – up to 40% off fashion, beauty, home & living, and food & restaurants.
- Corporate benefits – exclusive discounts at top brands.
- Discounted public transport pass – a convenient and eco-friendly way to get to the office.
- Company pension plan – supporting you as you build your future.
Benefits
Food & drink
Higher take-home pay
Topics you will work on
Job locations
About your employer
We are developing a German tradition-based company in the age of digitalization anew and will be the leading omni-channel market place in Germany.
- 250+ Employees
- Established Company
- Onsite, Hybrid
- Trade
Employer reviews
- Team culture
- 2.8
- Working conditions
- 2.6
- Engineering
- 2.4
- Career growth
- 2.8
More jobs
These jobs might also interest you
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
