Job
In this role, you will enhance the Information Security Management System, support the ISO 27001 certification, and advise on information security risks and measures in software development and IT.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You assume the role of the Information Security Officer and specifically develop the existing Information Security Management System (ISMS).
- You oversee our ongoing ISO 27001 certification, manage the necessary measures, and ensure that the requirements of the standard are permanently embedded in the company.
- You advise management and specialist departments on risks and measures related to information security and translate requirements into concrete actions for development, Managed IT Services, and Business Applications.
- You maintain and refine existing policies, processes, and security concepts, monitor their compliance, and coordinate risk analyses for internal systems and customer environments.
- You ensure that information security is embedded throughout the entire software development and operational process, e.g., through secure development practices, hardening, and authorization concepts.
- You are the central point of contact for information security matters, support customer audits as well as ISO audits, and organize training sessions and awareness measures for employees.
Our expectations of you
Education
- Completed degree in Computer Science, Business Informatics, or a comparable qualification.
Qualifications
- Ideally, additional knowledge of other standards and frameworks (e.g., BSI Basic Protection, OWASP, NIST).
- Good understanding of IT infrastructures, networks, cloud environments, and software development processes.
- Ideally, certifications in the field of information security (e.g., ISO 27001 Lead Implementer/Lead Auditor, CISM, CISSP, or similar).
- Knowledge of relevant legal frameworks, particularly GDPR and requirements for data processing agreements.
- Strong analytical thinking skills as well as the ability to communicate complex issues appropriately to the target audience.
- High consulting and communication skills and enjoyment in actively promoting information security within the company.
Experience
- Several years of practical experience in establishing, operating, or certifying an ISMS according to ISO 27001.
Benefits
Health, fitness & fun
Food & drink
Work-Life-Integration
Topics you will work on
Job locations
About your employer
GECKO steht für innovative Software-Entwicklung. Ob Shop oder Buchungssysteme großer Touristikunternehmen - wir lieben es, die IT-Prozesse unserer Kunden beständig aktuell zu halten und zu erneuern. Und die lieben unsere Qualität und Verlässlichkeit - seit 1990. Diesem Anspruch werden wir mit motivierten Kollegen gerecht. In kleinen Teams und mit flachen Hierarchien sind wir stets am Optimieren, Aushecken, Tüfteln und Kreieren.
- Established Company
- Onsite, Hybrid
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
