Information Security Officer (m/f/d)

Permanent Position | Full-time | Hybrid / Remote with occasional meetings in Pulsnitz

As the Information Security Officer, you will play a central role in the further development of our information security management and ensure that security requirements are implemented effectively, auditable, and traceable.

Responsibilities

• You will steer and further develop secupay AG's information security management system, including policies, standards, procedures, roles, and control frameworks.
• You will advise the Executive Board, management, departments, IT, and Security Office/SOC on information security and secure systems, applications, processes, and service providers.
• You will derive security requirements from DORA, ZAG-MaRisk, BaFin and EBA regulations, GDPR, ISO/IEC 27001, TISAX, and PCI DSS and monitor their implementation.
• You will accompany audits, assessments, management reviews, certifications, and inspections, including auditable evidence.
• You will evaluate security incidents, vulnerabilities, threats, and test results and support incident management, recovery, and digital operational resilience.
• You will design awareness and training measures and work closely with ICT risk management, IT compliance, data protection, outsourcing management, audit, and other control functions.

Qualifications

As a passionate security expert, you know the regulations inside out and can translate them into practice. You work independently and take responsibility, but you can also win over and inspire others for common goals.

• You have several years of relevant professional experience in the field of information security.
• You have very good knowledge of information security management, as well as ISO/IEC 27001 and PCI DSS.
• You are familiar with relevant regulatory requirements, especially DORA, ZAG-MaRisk, GDPR, BaFin and EBA regulations.
• You have experience in audit, certification, assessment, and evidence processes.
• You have knowledge of modern IT infrastructures, network and security architectures, as well as SIEM, EDR, monitoring, and vulnerability management solutions.
• You work analytically, carefully, independently, and communicate confidently with management, IT, departments, auditors, and service providers.
• You speak German and English fluently.

DESIRABLE, BUT NOT MANDATORY

• Ideally, you have experience in setting up or further developing an ISMS.
• Ideally, you are a certified Information Security Officer.
• Ideally, you have already worked with Jira and Confluence.

Benefits

• Trust! Work time can be managed independently.
• Variety! Mobile working, possible long-term, with on-site presence only for audits, important appointments, or by arrangement.
• Lifelong learning! Demand-oriented certifications and further training.
• Culture! Appreciative teamwork, open communication, and dynamic teams.
• Work-life balance! 30 days of basic vacation.

A challenging, varied role with perspective awaits you in an exciting and fast-growing company. Have we piqued your interest? Then we look forward to receiving your complete application documents, including your salary expectations and earliest start date.

Find more English Speaking Jobs in Germany on Arbeitnow