Job
- Level
- Lead
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Project, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you develop Security-by-Design methodologies, manage assessments, and advise Product Owners on security controls, while establishing a central cockpit for monitoring and escalating critical risks.
Your role in the team
- Definition and further development of the methodology, evaluation criteria, and evidence requirements for Security-by-Design assessments in the Growth-Beyond program.
- Management and quality assurance of security assessments, in-depth reviews, and gate recommendations across all relevant use cases.
- Advising Product Owners on translating security findings into concrete controls, actionable measures, and reusable security patterns.
- Development and management of a centralized Security Program Dashboard, including Triage, Assessment, Gate, and Action Status.
- Technical management and needs-based deployment of security architects as well as transparent escalation of capacity bottlenecks.
- Preparation of risk acceptances and escalation of critical risks, open conditions, or gate bypasses to the CISO and program management.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Good understanding of AI and agent systems, especially of LLM risks, prompt injection, tool access, and potential data leakage.
- Knowledge of relevant standards and regulatory requirements, particularly ISO 27001, NIS2, TISAX, IEC 62443, and the EU AI Act.
- Strong ability to effectively manage, prepare decisions, and follow up on measures without disciplinary leadership responsibility.
- Clear, target audience-oriented communication, high implementation focus, and pragmatic problem-solving skills; relevant certifications such as CISSP, CISM, or ISO 27001 Lead Auditor are advantageous.
Experience
- At least eight years of professional experience in information security as well as several years of practice as a Security Architect in complex program or transformation environments.
- Extensive experience with Stage-Gate processes, Threat Modeling, and deriving effective and actionable Security Controls.
This text has been machine translated. Show original
What we offer
- You can expect an exciting and varied role in an international environment, as well as an attractive benefits package that includes flexible working hours, sabbaticals, and remote work.
- In addition, you can work from abroad within the EU for up to twenty days a year.
- A wide range of training opportunities support your professional and personal development.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Health, Fitness & Fun
Higher Take-Home Pay
Topics You Will Work On
Job Locations
About Your Employer
Knorr-Bremse AG
Knorr-Bremse is the world leader in manufacturing brake systems and other subsystems for rail vehicles. Our 29,000 employees at over 100 locations in 30 countries around the world ensure mobility with technological excellence, sustainable economic practices, and social responsibility. We offer our employees a varied and challenging workload in an international setting, with attractive conditions such as flexible working hours, opportunities for professional and personal development, and health and fitness programs.
Description
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Industry, Production
Security Architect & Program Office Lead
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
