Job
- Level
- Experienced
- Job Field
- IT, Application, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Münster (Hessen)
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop FOSS regulations and SSDLC policies, implement security and compliance controls, and support application developers in managing risks related to licenses and vulnerabilities.
Job Technologies
Your role in the team
- You are responsible for the FOSS topic, ensuring compliance with all regulatory requirements as well as IT security standards.
- Your responsibilities also include the further development of the existing FOSS regulation documents and SSDLC guidelines based on regulatory requirements (e.g., DORA).
- You define the specifications and quality gates for FOSS in the SSDLC, and you create a toolkit that enables their effective and automated application in CI/CD pipelines.
- Our application developers are supported by you in identifying, assessing, and addressing FOSS-related vulnerabilities, license, and other risks (e.g., project health, supply chain risks) throughout the entire SSDLC.
- You evaluate suitable tools, select appropriate solutions, and support their implementation — including tools for SBOM creation, vulnerability analysis (SCA), risk-based policy assessment, as well as license determination and documentation.
- The creation of metrics and reports on the status of FOSS compliance and the effectiveness of SSDLC controls within the company is your responsibility.
- You will become part of an interdisciplinary (virtual) team that holistically optimizes the interplay of technology, security, IT law, and license management, thereby shaping the efficient use of FOSS in the SSDLC.
This text has been machine translated. Show original
Our expectations of you
Education
- You have a degree in Computer Science or a comparable qualification.
Qualifications
- You practically implement security and compliance controls in the development process, e.g., through quality gates, policy enforcement, and automated checks.
- Knowledge of FOSS licenses and their impact on product design and architecture is advantageous.
- An analytical, structured, and risk-oriented working style characterizes you.
- Clear and understandable communication with technical and non-technical stakeholders is a matter of course for you.
- You are self-organized and handle regulatory requirements and security specifications responsibly.
Experience
- You are interested in shaping topics such as FOSS, vulnerability management, and software supply chain risks, and you have already gained knowledge and experience in these areas.
- You have solid experience with common SCA/Security tools, SBOM management, and CI/CD pipelines.
- Previous experience in application development is desirable but not mandatory.
This text has been machine translated. Show original
What we offer
- You will receive a collectively agreed salary (according to the collective agreement for the private insurance industry). In addition, you will receive holiday and Christmas bonuses as well as comprehensive social benefits, including company pension scheme.
- Furthermore, you can expect a future-proof workplace.
- Depending on the position and in consultation with your supervisor, you can choose between different home office models.
- At least two days are planned at the LVM campus.
- In addition to fully equipped technical facilities, you will receive a one-time home office allowance of €800 gross.
- Our flexible working hours policy with a 38-hour workweek and 30 vacation days allows you to adjust your working hours in consultation between 7 a.m. and 8 p.m.
- Of course, every overtime hour worked will be paid, or alternatively, it can be compensated with time off.
- In addition to our home office policy, you can work remotely for up to ten additional days within Germany or abroad in the EU.
- This promotes the compatibility of your professional and private goals.
- Your personal and professional development is especially important to us.
- Therefore, we offer you tailored internal and external training opportunities.
- Your well-being is important to us.
- We support you with social counseling and a variety of health services—including corporate sports and a subsidized EGYM Wellpass membership—to help you stay physically and mentally fit.
- A structured onboarding process and cross-departmental networking ensure that you feel well supported from the very beginning.
- We place great importance on a good working environment.
- Therefore, company events are firmly scheduled with us, such as the annual cross-departmental Carnival celebration at the Münster location.
- As an employee, you benefit from special rates and conditions for employees in the insurance industry.
- Take advantage of the opportunity of a sabbatical to take a break for personal projects or travel and to recharge with new energy.
- Our excellent company restaurant, with heavily subsidized prices, ensures your nourishment.
- We support your mobility with a subsidy for the Job Ticket or Deutschlandticket and also offer bike leasing.
This text has been machine translated. Show original
Benefits
More net
Work-Life-Integration
Topics that you deal with on the job
Job Locations
This is your employer
LVM Versicherung
IT systems that are highly modern are crucial to our success as a company. More than 600 employees in IT develop custom solutions at our headquarters in Münster that support our departments, agencies, and subsidiary Augsburger Aktienbank (AAB) in their everyday work. Die LVM Versicherung is one of the leading companies in the insurance industry.
Description
- Company Size
- 1-49 Employees
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Banking, Finance, Insurance
software architect
- Location
- Münster (Hessen)
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
