Information Security Officer (m/f/d)

Elevion is the European solution provider for all tasks related to climate-friendly energy generation and use. With our focus on integrated energy services, we deliver solutions that combine CO2 reduction, increased energy efficiency, savings on energy costs, renewable energy systems, as well as all areas of technical building equipment and services.

With our over 60 consolidated companies and more than 4000 employees, we stand together as a large family and drive forward the topic of "green energy for the future".

Elevion GmbH combines the people-oriented and down-to-earth approach of a medium-sized company with the financial strength and professionalism of an international holding company. The Elevion Group operates in 12 countries – including Germany, Austria, the Netherlands, Italy, Poland, and Romania. In 2023, we completed 6000 projects and achieved a total turnover of approximately €1.2 billion, with €1 billion in Germany.

In the German market, with Elevion GmbH and Elevion Energy & Engineering Solutions GmbH as well as our subsidiaries, we are one of the market leaders for technical building equipment and planning as well as decarbonization solutions. Those who choose a job at Elevion receive diverse development and career opportunities in an exciting and future-proof industry.

Information Security Officer (m/f/d)

Information Security Strategy & Governance

• You coordinate and further develop information security for the German companies of the Elevion Group.
• You support the implementation of the group-wide security strategy as well as relevant guidelines, standards, and specifications.
• You prepare governance bodies, coordinate meetings, follow up on measures, and ensure the documentation of decisions.
• You work closely with the CISO Germany, the Elevion Group Security Team, as well as internal and external stakeholders.

Compliance & Risk Management

• You manage and monitor the implementation of regulatory requirements, particularly in connection with NIS2.
• You identify, assess, and communicate information security risks and support the implementation of appropriate measures.
• You coordinate security assessments and compliance reviews and create regular reports for management.
• You support the management of security risks related to service providers and other third parties.

Security Operations & Projects

• You support projects in defining and implementing security requirements.
• You assess solution architectures from an information security perspective and coordinate penetration tests as well as the implementation of measures resulting from them.
• You support the introduction and further development of the Information Security Management System (ISMS).
• You coordinate security incidents and ensure compliance with defined escalation processes.

Awareness, Resilience & Business Continuity

• You develop measures to raise employee awareness for cyber and information security and support their implementation.
• You support management in establishing and further developing business continuity and operational resilience programs.
• You coordinate tests, exercises, and improvement measures to strengthen organizational resilience.

Technical Qualifications

• Completed university degree, preferably in computer science, information security, business informatics, or a comparable field.
• At least five years of professional experience in cyber security and information security.
• Ideally, you possess certifications such as CISSP, CISM, or comparable qualifications.
• In-depth knowledge of relevant information security standards and best security practices.
• Experience with modern security technologies and security architectures.
• Knowledge in the area of OT Security is an advantage.
• Very good German and English skills, both written and spoken.
• Confident demeanor and the ability to communicate and present effectively at management level.

Personal Competencies

• Strong communication and teamwork skills.
• High level of initiative as well as a structured and solution-oriented way of working.
• Sense of responsibility, reliability, and integrity.
• Willingness to continuously acquire new knowledge and actively follow current developments in information security.

• Medium-sized meets large corporation – We live the best of both worlds, the medium-sized business with its solution orientation and hands-on mentality, while simultaneously striving for the professional standards of a corporation
• Salary – Our claim is to pay our colleagues an attractive and fair salary
• Work-Life-Balance – We support our colleagues through various working time models as well as the option of mobile working, with all necessary equipment, to balance their private and professional lives
• Perspective – The world is constantly changing. To ensure we are always part of it, we promote the personal development of our colleagues and show them perspectives within the group
• Health and Fitness – The health and well-being of our colleagues are important to us, which is why we have developed a diverse range of health offerings and offer bike leasing
• Open Communication – We maintain respectful, appreciative, and open communication across all hierarchical levels
• Discounts - So that our colleagues can save real money, you can use all offers on the Corporate Benefits platform

ADZN1_DE