About the position
Permanent governance-risk-compliance role in operational cyber security for public-sector IT: certification readiness, risk and business-impact analysis, awareness and IT emergency management.
Your tasks
- Advise and technical support all operational information-security topics
- Prepare the organization for ISO 27001 and critical infrastructure certification
- Advise on technical and organizational measures (TOMs) under GDPR
- Run IT risk analyzes and business impact analyzes (BIA)
- Design and deliver security awareness workshops and training
- Advise on IT emergency management and business continuity management (BCM)
- Contribute findings to IT planning and IT strategy via the ITSM processes
The AI takes over · You are responsible
AI takes over
Control mapping and gap analysis · Evidence collection · Policy and TOM first drafts · Risk register maintenance
They are responsible
Risk judgment · Certification readiness call · Stakeholder trust · Sign-off
Your profile
- Operational information security: key management (KMS), multi-factor authentication (MFA), SIEM, central logging
- ISO 27001, critical infrastructure regulation, GDPR
- IT risk analysis, BIA, BCM and IT emergency management
- Jira and/or Confluence; IT infrastructure, operating systems, relational databases, software distribution
- User management systems, cryptography, security controls on IT data flows
- German C1 or better
Qualifications
- Degree in computer science or comparable qualification (or vocational IT training plus several years relevant work)
- 3+ years practical information-security experience with documented project references
- 1+ year hands-on with Jira and/or Confluence
- Security clearance is a precondition for this assignment