Information Security Officer (m/f/d)

Erfurt

Full-time

Immediately

Permanent

In this responsible position, you are the central point of contact for all information security matters. You report directly to the CISO and support management, specialist departments, and the IT department in implementing legal, regulatory, and internal security requirements, making an important contribution to protecting our information, systems, and business processes. In doing so, you further develop existing security structures, support projects, and ensure compliance with regulatory and internal company requirements.

Apply directly online now

Tasks & job requirements

Your tasks:

Operation, maintenance, and continuous further development of our Information Security Management System (ISMS) in accordance with the CISO's specifications
Creation and maintenance of security policies, security concepts, procedural instructions and ISMS documentation
Support in the further development of processes, standards and security requirements
Creation of key figures, reports and decision templates for the CISO and management
Conducting protection needs assessments as well as information security and risk analyses
Maintenance of the risk register as well as tracking of identified risks and measures
Assessment of security-relevant risks with service providers, suppliers, cloud services and AI applications
Advising management, specialist departments and IT regarding regulatory, legal and internal security requirements
Assessment, documentation and coordination of the handling of security incidents

Monitoring of vulnerability and patch management as well as evaluation of current threats and security alerts
Support in the implementation of appropriate security measures to minimize risk
Planning and execution of internal security controls
Follow-up of findings as well as support in their implementation
Preparation and support of internal and external audits, certifications as well as regulatory inspections
Participation in the further development of IT emergency management
Support in emergency exercises as well as preparation for crisis and exceptional situations
Planning and execution of training, awareness and sensitization measures
Support of IT, digitalization and procurement projects taking into account "Security by Design“
Management and coordination of internal IT projects as well as coordination of changes in the IT environment

Your profile:

Completed degree in computer science, business informatics, information security or comparable qualification; alternatively, IT vocational training with relevant professional experience
Experience in leading and managing IT projects as well as in project management
In-depth knowledge of the ISO/IEC 27001 and ISO/IEC 27002 standards
Ideally a qualification as an ISO/IEC 27001 Implementer and Internal Auditor
Experience in the establishment, operation or further development of an ISMS
Knowledge in risk, process and document management
Understanding of modern IT infrastructures and technologies, such as networks, operating systems, Active Directory, cloud services, firewalls and endpoint security
Knowledge in incident handling, vulnerability management and IT emergency management
Basic experience with ISMS tools, SIEM solutions and vulnerability scanners

Knowledge in the preparation and support of audits
Familiarity with modern security concepts such as Zero Trust, Cloud Security and Secure-by-Design
Ideally knowledge of IT service management according to ITIL
Analytical and structured way of working as well as pronounced conceptual thinking skills
High sense of responsibility and independent way of working
Strong communication skills as well as a confident and sovereign demeanor
Ability to convey complex matters in an understandable way
Moderation and consulting competence in dealing with management, specialist departments and IT
Resilience and decision-making ability even in critical situations
Very good knowledge of German as well as good knowledge of English in spoken and written form

Apply directly online now

Our benefits as an employer

Flexible Working

Flexible working hours and mobile working for a better work-life balance

Fair Compensation

Attractive remuneration plus 13th monthly salary and options for salary conversion

Company pension scheme

Capital-forming benefits and diverse retirement savings models

Health Management

Health check-ups, health day, courses and themed months

Family Friendliness

Kindergarten allowance, events for employees' children, and holiday care

Company daycare center

Extended opening hours, bilingual concept, and family atmosphere.

Professional Development

Comprehensive portfolio for professional and personal development

Features

Ergonomic workplaces with modern technology and creative coworking space

Employee events

Regular company events such as summer party, Christmas party and family activities

Company Care Navigator

Advice and support from the company care navigator for family care situations

Bicycle leasing

Desired bicycle at advantageous conditions for healthy, environmentally friendly mobility

Location

Headquarters in Erfurt with good connections and attractive city center location

Reference Meet the Team

Meet the Team

"I enjoy working at LEG because I can balance my career and family well here. Flextime and the 39-hour week allow me to organize my work flexibly."

Jan Sparwald
Finance and Organization, IT Department

About us

We love Thuringia and do everything we can to make the Free State even better, in order to advance everyone who wants to invest, work and live in Thuringia.

Since 1992, we as the State Development Corporation of Thuringia (LEG), have supported the development of the Free State into an attractive location for business, investment, and technology.

About us