Global Information Security Lead 100% (f/m/d)

Our client is an internationally active, growth-oriented technology company with innovative, data-based products. Information security forms a central foundation for the trust of the global customer base and the reliable protection of business-critical data. You can expect a modern environment in which pragmatic solutions, personal responsibility, and continuous development are the focus.

What the company offers

• Competitive compensation package
• Responsible key position with a direct reporting line to the CIO
• High degree of creative freedom in the further development of global information security
• International and technologically demanding working environment
• Opportunities for professional and personal development
• Support for continuous further education in the field of Cybersecurity
• Regular team events and company activities
• Free parking
• Modern, innovative, and appreciative corporate culture
• Long-term permanent employment in a growing company

Our client wishes

• At least three to five years of professional experience in information security with practical technical activity
• Sound experience in monitoring, evaluating, and fully processing security incidents
• Good knowledge in the field of Cloud Security on at least one leading platform such as AWS, Azure, or GCP
• Experience with ISO 27001 or SOC 2
• Knowledge in Vulnerability Management as well as in handling security monitoring tools
• Independent and solution-oriented way of working with a strong sense of responsibility
• Ability to independently plan, drive, and successfully implement initiatives
• Clear and audience-appropriate communication with IT, Engineering, specialist departments, and customers
• Willingness to visit other company locations once or twice per year
• Certifications such as CISSP, CISM, or Cloud Security specializations are an advantage
• Experience with site- or region-spanning security structures is an advantage
• Background in a SaaS, Deeptech, or product-oriented technology company is an advantage
• Knowledge in DevSecOps or Infrastructure as Code is an advantage
• Very good English skills in speaking and writing

What awaits you

• Overall responsibility for strategy, operations, and compliance in the field of information security
• Monitoring and evaluation of security alerts as well as coordination of Incident Response
• Responsibility for the full processing and sustainable resolution of security incidents
• Management of vulnerability scans and remediation of identified risks on end devices, servers, networks, and applications
• Monitoring and further development of the Cloud Security architecture in AWS, Azure, and regional platforms
• Responsibility for the deployed security solutions such as SIEM, EDR, E-Mail Security, Vulnerability Scanner, and WAF
• Further development of Identity and Access Management
• Optimization of SSO, MFA, privileged access, and periodic authorization reviews
• Ensuring professional processes for entries, changes in function, and exits
• Conducting security and architecture audits for new systems and infrastructure changes
• Maintenance and further development of the ISO-27001 certification
• Coordination of external audits and penetration tests
• Development and updating of security policies, standards, and operational playbooks
• Identification, documentation, and tracking of security risks
• Conducting security awareness training to strengthen the security culture
• Processing of security questionnaires and customer assessments
• Support of the Sales team in security-relevant tenders and customer discussions
• Understandable communication of security updates, policy changes, and required measures to all locations