Job
In this position, you will develop security policies and processes, conduct risk assessments, and promote awareness within the organization to strengthen information security at the corporate level.
This listing has been machine translated. Show original
Your role in the team
- Further development of the certified information security management system and the group-wide information security strategy.
- Development of security policies, frameworks, processes, and procedures to strengthen information security.
- Conducting security assessments, risk analyses, and vulnerability assessments to identify security risks and determine appropriate risk mitigation measures.
- Promoting employees’ security awareness through awareness initiatives, awareness programs, and information security training.
- Collaborate with the Cyber Security team to analyze, handle, and track security incidents, and implement effective countermeasures.
- Conducting emergency exercises as part of business continuity management to strengthen the Group’s cyber resilience and crisis preparedness.
- Support in the continuous improvement of security processes, governance structures, and compliance requirements in the field of information security.
Our expectations of you
Education
- Completed degree in business informatics, computer science, or a comparable field, with a focus on information security, or an equivalent qualification gained through relevant professional experience.
Qualifications
- In-depth knowledge of the ISO/IEC 27000 family of standards, as well as other relevant information security standards and best practices.
- Strong expertise in translating requirements from information security standards into concrete specifications for projects, IT systems, business processes, and governance structures.
- Relevant certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, Certified Information Systems Security Professional, or Certified Information Security Manager, as well as desirable knowledge of IT architecture management and cloud management.
- A self-directed approach to work combined with a confident manner, a strong sense of commitment, excellent organizational skills, and outstanding teamwork.
- Excellent communication skills and professional stakeholder management in German and English at a fluent, negotiation-level proficiency.
Experience
- Several years of professional experience in information security management and in handling information security, risk, and compliance requirements.
What we offer
- As an Information Security Manager (m/f/d) in Berlin, this role offers a permanent contract and flexible working hours.
Benefits
Health, fitness & fun
Higher take-home pay
Food & drink
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Dussmann Service Deutschland GmbH offers a comprehensive package of services around your building: from building technology, catering and security services to reception services, cleaning and commercial management to energy management.
- Established Company
- Onsite, Hybrid
- Power Sector, Economy · Construction, Real Estate, Building Services · Hotel and Restaurant Industry, Tourism
More jobs
These jobs might also interest you
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...