Information Security Manager responsible for steering InfoSec programs globally at ZEISS. Leading cross-functional initiatives and risk management strategies in a high-tech environment.
Responsibilities
Take ownership and steer complex domains and activities on a global scale
Contribute to risk management by identifying and assessing information security risks within your area of responsibility and defining and proposing mitigation measures
Develop the domain-specific strategy and roadmap by proposing long-term objectives aligned with other InfoSec domains and the corporate/business InfoSec strategy
Serve as the first point of contact for incoming requests and requirements for the dedicated InfoSec domain, and drive InfoSec programs, initiatives and projects according to agreed priorities and objectives
Engage with stakeholders across the organization to ensure alignment of InfoSec goals, priorities and initiatives
Lead and coordinate security project teams and provide guidance and mentorship to less experienced team members
Requirements
Apprenticeship, degree or professional education in Information Security Management, Business Administration, Corporate Governance, Management, IT, Engineering or a related discipline (Bachelor's or Master's degree)
Several years of professional experience in a field related to IT, Information or Cyber Security (e.g., Information Security Management, ISO 27001, information security KPIs, information security incident management)
One or more relevant, current information security certifications from an established organization (such as ISACA, (ISC)², CompTIA, EC-Council, GIAC, Offensive Security or vendor-specific certifications)
Experience managing and driving information security projects involving multiple stakeholders in a global business environment
Strong problem-solving skills and the ability to apply innovative thinking to complex tasks
Ability to work in a structured and independent manner and to correlate technologies, understand complex environments and business requirements
Ability to interact effectively with colleagues and stakeholders, including functional peers and managers, across functional areas and company divisions
High level of personal resilience and a self-driven, results-oriented approach
German (fluent) OR English (fluent); additional languages are an advantage
Providing security incident management for industrial environments at Telefónica Tech. Utilizing various monitoring platforms to enhance security posture.
Senior Cybersecurity Incident Responder at ZEISS handling technical incident response activities. Collaborating with cyber defense teams to ensure effective incident management and resolution.
Endpoint Security Engineer at Booz Allen designing and operationalizing data protection controls. Safeguarding sensitive data across enterprise systems and leading technical operations.
Senior Security Adviser handling governance and US integration tasks at Boeing. Liaising with US - based partners and coordinating crisis management for international security operations.
Lead Industrial Security Specialist at Boeing assessing compliance with security programs and implementing corrective actions. Involves extensive travel and oversight of security protocols across multiple locations.
Senior Manager of IT overseeing operational security services for Xcel Energy. Leading teams to ensure compliance and effective risk management across enterprise security operations.
IT Security Administrator managing access control and audit evidence across systems at Xcel Energy. Involves training security staff and handling incident investigations.
Lead a multidisciplinary team at NXP focused on the proactive identification and analysis of security vulnerabilities in semiconductor products. Drive innovative approaches to security testing and team management.
Senior ML Security Engineer developing security tools and frameworks for ML workflows. Ensuring proactive vulnerability detection and compliance with ML security standards at NXP.
Security Architect designing security architectures for embedded products at NXP. Collaborating with teams on threat assessments and managing security requirements in IoT/Automotive domains.