Skills

Full description

The Regional Information Security Officer will be responsible for the implementation and running of IT Risk Management and cybersecurity strategy.

Management of security control weaknesses and reporting on cybersecurity risks, supporting business goals.
Being responsible for growing and running the regional information security program.
Proactively working with business units to implement audits, measures and tools that meet global standards.
Provide security oversight over the regional infrastructure delivery team(s) (IT Infrastructure Zone Support Team), ensuring embedding security in the operations of the team as well as new initiatives.
Lead the information security function across the Region to ensure consistent and high-quality information security management in support of business goals, and in line with the Group Security Standards.
Collaborate with Group Information Security team (i.e. apply group standards within the region, drive regional action plans,…)
Manage the Regional Information Security budget in collaboration with the regional Business sponsor and with Group Information Security.
Be the hiring manager for own team and ensure senior business leadership buy-in for team composition/sizing.
Perform information security risk assessments including the reporting and oversight of treatment efforts to address negative findings.
Ensure that security is embedded in the project delivery process by providing the appropriate information security policies, practices, guidelines and necessary oversight.

7 to 10 years of relevant experience, including 5 years in a leadership role.
Bachelor’s degree
Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) certification preferred.
Knowledge of Information technology infrastructure library (ITIL) (certification preferred)
Experience in establishing cybersecurity and risk metrics
Excellent written and verbal English communication skills
Experience with the information security management frameworks, such as ISO 2700x, ITIL and (COBIT)

Please send your application in English.

The role is located in Ebersberg (40 min from the center of Munich)

Regional Information Security Officer (RISO) - EU

Compensation

Not disclosed

Location

München, BY, de

Work setup

Not specified

Seniority

Not specified

Employment

Not specified

Experience

7+ years

The Regional Information Security Officer will be responsible for the implementation and running of IT Risk Management and cybersecurity strategy.

Management of security control weaknesses and reporting on cybersecurity risks, supporting business goals.
Being responsible for growing and running the regional information security program.
Proactively working with business units to implement audits, measures and tools that meet global standards.
Provide security oversight over the regional infrastructure delivery team(s) (IT Infrastructure Zone Support Team), ensuring embedding security in the operations of the team as well as new initiatives.
Lead the information security function across the Region to ensure consistent and high-quality information security management in support of business goals, and in line with the Group Security Standards.
Collaborate with Group Information Security team (i.e. apply group standards within the region, drive regional action plans,…)
Manage the Regional Information Security budget in collaboration with the regional Business sponsor and with Group Information Security.
Be the hiring manager for own team and ensure senior business leadership buy-in for team composition/sizing.
Perform information security risk assessments including the reporting and oversight of treatment efforts to address negative findings.
Ensure that security is embedded in the project delivery process by providing the appropriate information security policies, practices, guidelines and necessary oversight.

7 to 10 years of relevant experience, including 5 years in a leadership role.
Bachelor’s degree
Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP) certification preferred.
Knowledge of Information technology infrastructure library (ITIL) (certification preferred)
Experience in establishing cybersecurity and risk metrics
Excellent written and verbal English communication skills
Experience with the information security management frameworks, such as ISO 2700x, ITIL and (COBIT)

Please send your application in English.

The role is located in Ebersberg (40 min from the center of Munich)