Information Security Officer managing IT and OT security strategies for global leader in PEM electrolysis. Responsible for designing and implementing effective security measures and compliance audits.
Responsibilities
Responsible for designing, implementing and continuously developing the IT and OT security strategy.
Contribute to operational security tasks, including log analysis, incident response, vulnerability management and coordination of penetration tests.
Establish and maintain a comprehensive security architecture for IT and OT environments.
Implement and support security tools such as SIEM, EDR, firewalls, IDS/IPS, IAM and OT monitoring solutions.
Conduct and support audits in accordance with ISO 27001, IEC 62443 and KRITIS requirements.
Perform risk analyses and derive appropriate protective measures against cyber threats.
Work closely with IT, OT, production and external service providers.
Advise management on risks, compliance requirements and investments in the security landscape.
Requirements
Completed degree in Computer Science, IT security or a comparable qualification.
Several years of professional experience in IT and/or OT security, ideally in an industrial environment.
Possession of at least one certification in general information security, e.g. CISSP, CISM or CISA.
Hands-on mentality and the ability to operate security tools independently.
Experience in network security for office and production environments, including firewalls, endpoint security and identity management, and ideally security solutions in OT environments (e.g. SCADA, ICS).
Knowledge of relevant security standards such as ISO 27001, NIS2, KRITIS and IEC 62443 and familiarity with common tools.
Analytical thinking, effective communication skills and the ability to explain complex topics clearly.
Careful, confidential and compliant execution of tasks in accordance with internal policies and applicable laws.
Business-fluent German and English.
Benefits
Flexible working arrangements for a good work-life balance.
Regular updates and transparent communication in our town-hall meetings.
Buddy program during onboarding.
Subsidy for daily lunch.
Attractive employee discounts through Corporate Benefits and FutureBens.
Application Security Programmer - Engineer at State Street focusing on building DevSecOps & AppSec strategies. Partnering with teams to enhance application security across various technologies.
Trainee in security measures at G+D Louisenthal focusing on monitoring and enforcing safety protocols. Gain valuable practical experience during a three - year apprenticeship.
Junior SAP Security Consultant managing SAP security and user administration within enterprise applications. Collaborating with stakeholders to enhance security and compliance in SAP environments.
AI Security Senior Engineer integrating advanced AI technologies into cyber defense. Collaborating across technical teams to enhance security measures and mentoring junior staff.
Principal Cybersecurity Architect designing and delivering high - quality cybersecurity solutions for AT&T's technological needs. Leading projects and collaborating across teams to enhance security frameworks and policies.
Cybersecurity Data Analyst responsible for analyzing data to improve client cybersecurity efforts. Developing key performance indicators to measure effectiveness of security processes.
Consultant·e/Auditeur·rice & Formateur·rice indépendant·e en Sécurité Alimentaire pour Diversey Consulting. Responsabilité sur missions d’audit et de formation en sécurité alimentaire en Belgique.
Senior Software Engineer designing and developing automated software solutions for Global Tech Assurance at Walmart. Collaborating with teams to enhance security controls and compliance initiatives.
Internship developing cybersecurity solutions for Booz Allen Hamilton focusing on real - world problems in a team environment with mentorship from senior leaders.