Consultant for Cybersecurity and Data Protection enhancing Information Security Management. Advising on compliance and supporting data protection implementation for clients and departments.
Responsibilities
Operation of the Information Security Management System (ISMS)
Advising and supporting business units in implementing and complying with data protection requirements (including training & awareness)
Coordination and execution of internal and external security assessments
Maintenance of the ISMS, conducting risk analyses and security reviews
Creation of action/measure catalogs; ISO 27001 consulting (and optionally ISO 9001)
Advising and supporting clients and Axians IT Security GmbH in the introduction and/or (re-)certification according to ISO 27001 (and ISO 9001)
Design and development of customer-specific ISMS processes and policies in line with standard requirements
Preparation and support for internal and external audits
Internal data protection management in accordance with the GDPR and BDSG
Advising and supporting business units in implementing and complying with data protection requirements (including training & awareness)
Conducting data protection audits and creating and maintaining data protection documentation
Requirements
Degree in IT, Law, Business Administration or a comparable qualification
Proven experience in data protection, information security and ISO 27001 and ISO 9001
Certifications such as ISMS Lead Auditor, Data Protection Officer (TÜV, IHK) or equivalent are an advantage
Knowledge of current legal/regulatory requirements (KRITIS, NIS2, DORA, GDPR, BDSG) and international security standards is desirable
Strong customer- and service-orientation, team player and willingness to travel regionally
Business-fluent German and English
Benefits
Participation in the corporate share program, including subsidized free shares and support for company pension benefits
Flexible working models (e.g., part-time, flexitime, trust-based hours, ...) and the option for mobile/remote work
Access to an external employee advisory platform for all areas of life (e.g., advice for caring relatives, childcare options, support with personal or professional issues, ...)
Health prevention measures and sports offerings, e.g., EGYM Wellpass or bike leasing
Numerous training and development opportunities in our VINCI Academy for your individual technical and leadership career
Employee discounts with over 700 well-known providers
State-of-the-art work equipment to support you in daily business (laptop, smartphone, ...) and of course complimentary drinks, fresh fruit and much more!
Campus Security Officer ensuring safety at Bright Horizons early childcare centers in Seattle. Responsible for access control, surveillance, and emergency response.
Sounding and Security Watch responsible for Navy asset security at NSF Diego Garcia. Conducting checks and ensuring safety during designated watch hours with strong situational awareness.
Sales Enablement Manager creating technical content for Upwind Security. Collaborating across teams to translate cloud security concepts into clear narratives for engineers and security leaders.
Security Engineer designing and implementing security measures to protect Snap Inc.'s infrastructure. Collaborating across teams while focusing on threat detection and response strategies.
IT Security & Compliance Head at Lonza leading security strategy and managing global risk. Collaboration with senior leadership to enhance information security across Capsules & Health Ingredients business.
Senior Security Manager leading security for Sanofi meetings and events across North America. Ensuring compliance with global meeting policies and managing event security operations in high - stake environments.
Security Officer maintaining safety protocols at Aloft New Orleans. Responsible for patrolling, monitoring security systems, and assisting guests with safety - related concerns.
Security Detection Specialist responsible for detecting cybersecurity incidents using advanced security technologies. Analyzing data feeds and leveraging security tools for incident detection and reporting.
Senior Incident Response Engineer at Walmart focusing on security threat campaigns to enhance detection and response capabilities. Collaborating with SOC and engineering teams to improve security posture.
Head of Infrastructure & Security at Kinatico, a RegTech leader, focused on cloud infrastructure and security governance. Leading a technically deep team of cloud engineers and security specialists in a hybrid environment.