Job
- Level
- Experienced
- Location
- Hamburg, Munich, Cologne
- Working Model
- Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you develop the cyber security strategy, ensure compliance with standards like ISO 27001, conduct risk analyses and audits, and advise on projects implementing security measures.
Your role in the team
- Implementation and further development of the cyber security strategy as well as the information security standards within the Pôle.
- Ensuring compliance with internal security policies as well as regulatory requirements (e.g., NIS2, ISO 27001).
- Conducting risk analyses, security assessments, and audits, as well as tracking the resulting measures.
- Management and coordination of security incident handling, including escalation and reporting.
- Advising and supporting the Business Units in projects, architecture decisions, and the implementation of 'Security by Design'.
- Planning and implementation of security awareness and training measures to promote a sustainable security culture.
- Close collaboration with international security teams, IT managers, data protection, and management, as well as regular reporting on risks, compliance, and security status.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in Computer Science, Information Security, Business Informatics, or a comparable qualification.
Qualifications
- In-depth knowledge of relevant standards and regulatory requirements such as ISO 27001, NIS2, GDPR, and IT compliance.
- Good technical knowledge in areas such as network security, Identity & Access Management, Endpoint Security, and vulnerability management.
- Independent, structured, and responsible working style, ideally with certifications such as CISM, CISSP, or ISO 27001 Lead Auditor/Implementer.
Experience
- Several years of professional experience in the field of information security, IT security, or IT governance.
- Experience in establishing and operating Information Security Management Systems (ISMS), risk analyses, and audits.
- Strong communication skills and experience collaborating with management, IT, data protection, HR, and specialist departments.
This text has been machine translated. Show original
What we offer
- THE BEST OF ICT WITH A HUMAN TOUCH - True to our motto, you will experience appreciation for your work from day one.
- We embody the team spirit – with plenty of creative freedom, short decision-making paths, flat hierarchies, an autonomous work environment, a clear vision for the future, and guaranteed a lot of fun at work!
- Our culture of using the informal "you" and the open-door policy are part of our togetherness — if you have any questions, you can always reach out to your manager or colleagues.
- Participation in the company-sponsored stock program, including subsidies for free shares and promotion of occupational pension schemes.
- Modern offices where daily work on-site is enjoyable.
- Access to an external employee consulting platform for all life situations (e.g., advice for caring for dependent relatives, childcare options, support with private or professional issues, ...).
- Measures for health prevention and sports activities, e.g., subsidies for fitness studio providers or bike leasing.
- Numerous training and development opportunities in our VINCI Academy for your individual professional and leadership career.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Health, Fitness & Fun
Higher Take-Home Pay
Food & Drink
Topics You Will Work On
Job Locations
About Your Employer
VINCI Energies
VINCI Energies is focused on introducing new technologies to stay competitive in a constantly changing world. Two key areas of development are digital transformation and the shift to renewable energy
Description
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Information Security Officer
- Location
- Hamburg, Munich, Cologne
- Working Model
- Onsite
- Diversity
- Open for all genders
