Job
In this role, you will take responsibility for the information security management system (ISMS), create emergency plans, and audit security measures to ensure information security.
This listing has been machine translated. Show original
Your role in the team
- Assumption of the role of Information Security Officer (ISO).
- Operation, maintenance, and further development of our existing certified Information Security Management System (ISMS).
- Coordination and further development of emergency management in collaboration with the specialist departments.
- Creation, maintenance, and testing of emergency plans and procedures, particularly in the commercial area.
- Providing expert support to managers and departments on information security matters.
- Assessment, development, and effectiveness review of information security measures, as well as tracking their implementation.
- Planning, conducting, and following up on ISMS audits, including at service providers and partner organizations.
- Coordination of external certification and surveillance audits as the central point of contact.
- Technical coordination with IT, data protection, and information security stakeholders in a municipal environment.
- Maintenance, management, and publication of relevant management documentation.
Our expectations of you
Education
- Completed degree in IT, IT security, information security, business informatics, or a comparable qualification with relevant professional experience.
Qualifications
- Good knowledge of ISO/IEC 27001 and a basic understanding of relevant security standards and regulatory requirements.
- Knowledge of risk management, threat and vulnerability assessments, and the effectiveness testing of security measures.
- Ability to create, maintain, and further develop concepts, processes, contingency plans, documentation, and management evidence.
- Structured, self-reliant, and meticulous approach to work.
- Analytical skills and the ability to present complex topics in an understandable way.
- Strong communication skills and a confident demeanor.
Experience
- Experience in information security and information security management, particularly in operating and further developing an ISMS.
- Interest in further developing emergency management, ideally with knowledge of or practical experience in crisis, emergency, or business continuity management.
- Experience in energy supply, the critical infrastructure (KRITIS) sector, or with energy industry regulations (e.g., the German Energy Industry Act (EnWG) and the IT Security Catalogue) is an advantage.
What we offer
- Let’s talk about your salary: Your compensation is based on pay grade 11 of the collective agreement for utility companies (TV-V), which corresponds to a gross annual salary of approximately €68,286–€89,206.
- The foundation? Your responsibilities, qualifications, and professional experience.
- In addition, we offer you exclusive discounts on your personal electricity consumption (employee discount), JobRad leasing, and other attractive benefits.
Benefits
Health, fitness & fun
Topics you will work on
Job locations
About your employer
Energieversorgung Leverkusen GmbH & Co. KG (EVL) ensures the reliable supply of energy and water in the city of Leverkusen. Additionally, the company is committed to creating sustainable supply offerings.
- Established Company
- Power Sector, Economy
More jobs
These jobs might also interest you
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...