IT-Security & Compliance Specialist (m/w/d)

ADVITOS is a very successful company in the medical technology sector. Strong growth in a highly regulated environment only works with a perfect ISMS. At our company, you can build an ISMS from scratch. Prospectively, you will take over a staff position directly under the management (CISO) after successfully building the ISMS. Your job is to think compliance smart and automated, instead of generating paper mountains.

Therefore, we are looking for:

IT-Security & Compliance Specialist (m/w/d) – with potential to become CISO

Aufgaben

• In the first phase (approximately 24 months), you will be operationally anchored in the IT department to build the ISMS. After successful implementation, a transition to an independent CISO staff position under management is planned.
• Framework: Building and leading an ISMS oriented towards ISO 27001, taking into account NIS2 requirements and actively implementing them
• Schnittstellenmanagement: Close cooperation with quality management (ISO 13485) to ensure the security of our medical technology products (MDR).
• Risikomanagement: Identifying and evaluating IT risks, as well as regular reporting to management.
• BCM & Resilienz: Conceptualizing and implementing business continuity management (BIA, recovery plans).
• Security Governance & Architecture: Defining security baselines for IT administration and monitoring the implementation (Vulnerability Management).
• (Cyber-)Security: Introducing training and sensitizing employees

Qualifikation

• Ausbildung: Study of computer science, IT security or a comparable qualification with several years of professional experience (2 to 5 years).
• Expertise: In-depth knowledge of IT security frameworks (ISO 27001, NIST or similar) and ideally experience in the regulated environment (medical technology, pharmaceuticals, KRITIS).
• Mindset: You understand security as an