Job
In this role, you will develop internal regulations for information security and validate their effectiveness through audits. You will also advise internal stakeholders and design awareness programs in an agile environment.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You are part of the corporate team at Provinzial and independently responsible for the implementation of information security, emergency management, and ICT risk management within our group companies.
- In this role, you will undertake the following tasks:
- Development of internal regulations and processes, taking into account legal and regulatory requirements as well as recognized norms and standards.
- Validation of compliance as well as effective resilience and security through audits, risk assessments, and testing.
- Monitoring and measuring the success of risk mitigation measures and areas for improvement.
- Continuous monitoring and assessment of the specific threat situation.
- Internal consulting and support regarding the verifiable and effective implementation of relevant requirements in an agile environment and based on modern and cloud-based technologies.
- Design of information and awareness-raising programs.
- Development of target group-oriented management reviews, reports, and key figures.
- Organization and moderation of required committees.
- Coordination with relevant interfaces and stakeholders (e.g., internal audit, external auditors, and supervisory authorities).
Our expectations of you
Education
- Successfully completed (applied) university studies in (business) mathematics, (business) informatics, IT security, or an equivalent qualification with relevant professional experience.
Qualifications
- In-depth knowledge of regulatory and legal requirements related to resilience, information security, and emergency management (especially Digital Operational Resilience Act (DORA), IT Security Act).
- Strong communication and presentation skills, as well as consulting competence and negotiation skills.
- Reliable and solution-oriented work approach.
- Openness, reflective and responsible handling of digital technologies and AI applications, as well as willingness to actively shape change and continuously develop working methods and knowledge.
Experience
- Several years of practical experience in the development and implementation of management systems for information security and emergency management, based on recognized standards such as ISO/IEC 27001 and ISO 22301.
- Experience in conducting threat and risk analyses as well as validating operational information security and emergency preparedness.
- Experience in the design and implementation support of IT security in cloud environments (especially AWS and other-as-a-Service providers).
What we offer
- Flexible working hours and actively practiced work-life balance.
- Time tracking and the ability to convert compensation into free time.
- Free lunch in our own company restaurants and coffee lounges.
- Mobile working up to 60%.
- Innovative health management.
- Various sports activities.
- Diverse opportunities for further training.
- Company pension scheme and attractive special payments.
- JobTicket & JobRad.
- Free parking facilities.
Benefits
Health, fitness & fun
Food & drink
Higher take-home pay
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Provinzial Rheinland is a preeminent German insurer focusing on damage, casualty, and personal insurance. Our nearly 3700 employees serving both internal and external customers are dedicated to meeting the needs of our nearly 2 million policyholders.
- Established Company
- Hybrid, Onsite
- Banking, Finance, Insurance
More jobs
These jobs might also interest you
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
