Information Security Specialist responsible for ISMS lifecycle tasks at ALDI. Collaborating with stakeholders on risk assessment and treatment activities while ensuring effective governance.
Responsibilities
Support operational execution of the ISMS (Information Security Management System) lifecycle tasks, ensuring due dates are met and processes are properly executed
Facilitate lifecycle alignment by coordinating with Product Owners and stakeholders to schedule and drive risk assessment and risk treatment activities
Conduct and support structural analysis meetings, explain approaches, and manage communication timelines
Act as an operational interface between subject matter experts, security consulting teams, and the CISO Office
Support risk assessment and treatment workflows, engaging additional experts when necessary
Provide assistance in creating and documenting appropriate risk treatment measures
Participate in regular status meetings and maintain continuous dialogue with the CISO Office to ensure effective process monitoring and governance
Collaborate proactively to drive forward security tasks and maintain process execution within the information security framework
Requirements
Basic to moderate knowledge of ISMS and ISO27001 principles and practices
Experience or understanding of risk assessment and risk treatment processes
Strong communication skills and ability to work proactively and conscientiously
Familiarity with IT infrastructure, IT operations, project or quality management is beneficial
Good command of English (mandatory) and optionally German
Advantageous certifications include CISA, CISM, CISSP, or ISO27001 Lead Implementer/Auditor
Comfortable working collaboratively with multiple stakeholders including security governance and expert teams
Benefits
Growth opportunities in a continuously evolving organization
Long-term job security at a stable company
Competitive salary and benefits
Practical and tailored training programs
Varied tasks within a supportive and modern working environment
Flexible working arrangements including home office options
Cybersecurity Intern supporting Keenova's security program through hands - on experiences and mentorship. Engaging in various cybersecurity functions and contributing to meaningful projects.
Senior Security Engineer securing Cloudflare's global network and enterprise infrastructure. Working closely with engineering, IT, and compliance teams to address security risks at scale.
Senior IAM Systems Support Analyst providing L2 support expertise for CyberArk Agentic AI. Collaborating with security and development teams on IAM operations and compliance.
Senior Security Engineer focusing on hardening enterprise endpoints for cyber defense. Collaborating with NetSec and DataSec teams to minimize risks and enforce security protocols.
Security Consultant assessing and implementing security measures for organizations. Collaborating with clients to enhance their security posture and protect sensitive data.
Manager overseeing leadership protection and event security for GEICO. Responsible for security planning, threat analysis, and incident management during company events.
Cybersecurity Consultant managing TDR delivery team to enhance client security posture. Collaborating with clients and leading technical contributions in cybersecurity services.
Cyber Security & Compliance Lead protecting data and systems at Displayr. Responsible for risk management, compliance frameworks, and innovative security solutions using AI.
Lead Engineer in Security Engineering at Allstate overseeing security controls and product security teams. Collaborating with global stakeholders to manage security architecture and meet key performance indicators.
AI Security Architect focusing on AI security and governance for Voya Financial's applications and projects. Leading initiatives in artificial intelligence and securing innovative technology solutions.