Hofer KG
Information Security Specialist - ISMS
Information-security role at Hofer KG (ALDI) in Pécs: runs operational ISMS lifecycle tasks under ISO 27001 — scheduling and driving risk assessment/risk treatment with Product Owners and stakeholders, and acting as the interface between SMEs, security consultants, and the CISO Office.
- Compensation
- Not disclosed
- Location
- Pécs, HU
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Basic to moderate knowledge of ISMS and ISO 27001 principles and practices
- Experience or understanding of risk assessment and risk treatment processes
- Strong communication skills, proactive and conscientious working style
- Good command of English (mandatory)
- Comfortable collaborating with multiple stakeholders including security governance and expert teams
Nice to have
- German language skills
- Familiarity with IT infrastructure, IT operations, project or quality management
- Certifications: CISA, CISM, CISSP, or ISO 27001 Lead Implementer/Auditor
Full description
- MUNKAVÉGZÉS HELYE
- 7622 Pécs, Bajcsy-Zsilinszky utca 33.
- TEVÉKENYSÉGI TERÜLET
- IT
- MUNKAVÉGZÉS KEZDETE
- Megegyezés szerint
- FOGLALKOZTATÁS MÉRTÉKE
- Teljes munkaidő
-
-
megállapodás szerint
My responsibilities:
- Support operational execution of the ISMS (Information Security Management System) lifecycle tasks, ensuring due dates are met and processes are properly executed
- Facilitate lifecycle alignment by coordinating with Product Owners and stakeholders to schedule and drive risk assessment and risk treatment activities
- Conduct and support structural analysis meetings, explain approaches, and manage communication timelines
- Act as an operational interface between subject matter experts, security consulting teams, and the CISO Office
- Support risk assessment and treatment workflows, engaging additional experts when necessary
- Provide assistance in creating and documenting appropriate risk treatment measures
- Participate in regular status meetings and maintain continuous dialogue with the CISO Office to ensure effective process monitoring and governance
- Collaborate proactively to drive forward security tasks and maintain process execution within the information security framework
The knowledge I own:
- Basic to moderate knowledge of ISMS and ISO27001 principles and practices
- Experience or understanding of risk assessment and risk treatment processes
- Strong communication skills and ability to work proactively and conscientiously
- Familiarity with IT infrastructure, IT operations, project or quality management is beneficial
- Good command of English (mandatory) and optionally German
- Advantageous certifications include CISA, CISM, CISSP, or ISO27001 Lead Implementer/Auditor
- Comfortable working collaboratively with multiple stakeholders including security governance and expert teams
The offer that would convince me:
- Growth opportunities in a continuously evolving organization
- Long-term job security at a stable company
- Competitive salary and benefits
- Practical and tailored training programs
- Varied tasks within a supportive and modern working environment