Job
- Level
- Lead
- Location
- Hamburg, Dortmund
- Working Model
- Onsite
- Job Field
- IT, Project, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you lead a team to enhance the ISMS, define security policies, and manage regulatory requirements, while also supporting audits and maintaining stakeholder management.
Your role in the team
- Technical and disciplinary leadership of a team in the field of information security (2nd Line).
- Further development and management of the ISMS from a governance and compliance perspective.
- Ensuring independent monitoring (2nd Line) of information security and close collaboration with 1st Line (IT) as well as audit (3rd Line).
- Definition and further development of security policies, standards, and control mechanisms.
- Responsibility for regulatory requirements (DORA, VAIT, MaRisk) including interpretation and derivation of directives.
- Management and facilitation of internal and external audits (e.g., surveillance activities) as well as ensuring the sustainable processing and follow-up of findings.
- Monitoring regulatory developments and deriving binding measures.
- Advising management and specialist departments as an independent control and governance function, as well as preparing decision templates for the executive board and top management.
This text has been machine translated. Show original
Our expectations of you
Education
- You have successfully completed a degree in (Business) Informatics or a related field.
Qualifications
- You stand out due to your excellent knowledge of regulatory requirements in the financial sector (DORA, VAIT, BAIT, MaRisk).
- You have the ability to prepare complex issues precisely and appropriately for the target audience up to top management level.
- You combine strategic thinking with strong implementation skills and pronounced stakeholder management.
- You have fluent German and very good English skills (spoken and written).
Experience
- You have solid professional and proven leadership experience in information security or cyber security with a focus on governance/compliance (ideally in the 2nd Line of Defense).
- You bring experience in supporting audits and inspections (internal audit, external auditors, supervisory authorities) as well as a clear understanding of the Three Lines of Defense.
This text has been machine translated. Show original
What we offer
- You will assume a central leadership role with direct influence on SIGNAL IDUNA's security strategy.
- You actively shape the growing CISO area in close collaboration with the executive board and central control functions.
- You can effectively balance your private life and work through a flexible working hours model.
- You can relax in the sun with 30 days of vacation per year or go hiking in the mountains.
- Your skills are systematically developed within the framework of competency management.
- You work in an environment that understands security as a strategic business enabler.
- You can look forward to regional and diverse cuisine in our company restaurants - including vegan options.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
Higher Take-Home Pay
Food & Drink
Topics You Will Work On
Job Locations
About Your Employer
SIGNAL IDUNA Gruppe
SIGNAL IDUNA is one of the most successful service providers in Germany. We offer our private and corporate customers in the field of insurance and finance everything they need. Accordingly, our professional opportunities are also very diverse. With passion and determination, we work behind the scenes every day on our products and advise our customers directly on site.
Description
- Founding Year
- 1907
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Banking, Finance, Insurance
Employer reviews
by devworkplaces.com
Total
(2 Reviews)3.0
Career Growth
3.1Engineering
2.4Workingconditions
3.8Culture
3.0
Head of Information Security - Governance & Compliance
- Location
- Hamburg, Dortmund
- Working Model
- Onsite
- Diversity
- Open for all genders
