Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Hamburg
- Working Model
- Onsite
Job Summary
In this role, you develop security policies and risk management systems, represent the company to vital stakeholders, and conduct audits for ISO 27001.
Your role in the team
- At Nect, compliance and risk management are a real competitive advantage. Close collaboration with authorities and regulators has enabled us to develop solutions that create genuine added value for our users and customers — often beyond what the market has considered possible.
- As an Information Security Officer, you play a central role in protecting our data and our company.
- You develop and establish a risk management and protection system for our information assets and our technology.
- In addition to policies, processes, and internal audits, you have a keen eye for the people who need to adapt their thinking and actions to our security system.
- Our security architecture is not only important for our users and us but also for our customers, partners (including qTSPs), and regulatory stakeholders (data protection, BSI, gematik, BNetzA).
- The public also counts among our stakeholders (CCC, tech press).
- One of your tasks is to represent Nect to these stakeholders and to recognize and address their justified needs.
- Direct reporting line to the C-level and representation of Nect in front of auditors (ISO 27001 and eIDAS).
- Shaping the security organization, building an internal SOC team.
- Specialist areas include IT, software development, product operations, biometrics, and machine learning.
- Influencing product development from a security perspective directly with Product Management and the Engineers.
- Risk management within the scope of ISO 27001 and in collaboration with the GRC Manager.
- Select and accompany PenTesters, including our product security tests (Deep Fakes, Presentation Attacks, etc).
- Responsibility for certifications and audits for ISO 27001 and eIDAS.
- Coordination with our GRC Manager and Data Protection Officer.
- Interaction with our external stakeholders (customers, qTSPs, gematik, BSI, BNetzA, public).
- Awareness and training for our teams and sharpening Nect's security awareness.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Sufficient technical depth to engage with experts from the specialized fields (cryptography, APIs and networking, ML security, Secure SDLC).
- Ideally, certifications in the ISO 27001 environment (e.g., Lead Auditor/Implementer; Risk Manager) are advantageous.
- Fluent German and English skills.
- Confident, clear communication of complex topics.
- Assertive, yet tactful.
- High level of initiative, structured and precise work.
Experience
- Experience in relevant environments is a significant plus (eIDAS / eIDAS 2.0, ETSI EN 319 401/411/421, ETSI TS 119 461, BSI TR-03107, TR-03116, gematik specifications).
This text has been machine translated. Show original
What we offer
- Flexible working and modern work environment.
- Scale-up culture with security & vision: digital, innovative, ambitious.
- Flat hierarchies & quick decision-making: real scope for your ideas.
- Personal development: in a growing tech company with a future.
- Modern office in Hamburg: central location between the Elbe and Alster with a pleasant working atmosphere.
- Health Plus: occupational supplementary health insurance.
- Team spirit: regular events and交流 in a motivated environment.
- Catering: Subsidy for your daily nourishment.
This text has been machine translated. Show original
Topics that you deal with on the job
Job Locations
This is your employer
Nect GmbH
Nect GmbH, based in Hamburg, is a technology company specializing in digital identity solutions. It offers AI-supported methods for online identification, electronic signatures, and secure identity wallets aimed at businesses and public institutions. Since its founding in 2017, Nect has aimed to make digital processes secure and user-friendly.
Description
- Company Type
- Startup
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Information Security Officer
- Location
- Hamburg
- Working Model
- Onsite
- Diversity
- Open for all genders
