Senior Information Security & Risk Manager

New

iTEC Informationssysteme AG

Job

In this role, you develop processes for information security, conduct risk assessments, and manage penetration tests, as well as coordinate security incidents and audits within the organization.

Job summary

This listing has been machine translated. Show original

Your role in the team

  • In the ISMS, you connect organizational information security with IT risk management and further develop the related processes, metrics, controls, and management reporting.
  • You conduct risk and protection needs analyses as well as business impact analyses together with relevant stakeholders, assess technical risks, and derive appropriate measures.
  • CRISAM® is used, among other things.
  • In security governance, you manage penetration tests, red teaming exercises, and security assessments from planning through (re-)testing to tracking and escalating outstanding actions.
  • You coordinate security incidents across the departments involved and track the resulting actions through to implementation.
  • Audits, compliance reviews, and regulatory requirements are just as much a part of the role as internal control system (ICS) controls, business continuity management (BCM) topics, and coordinating measures with internal and external stakeholders.

Our expectations of you

Education

  • IT-based training with a focus on IT/information security or a comparable field, or several years of relevant professional experience.

Qualifications

  • Knowledge of relevant standards and regulatory requirements, including ISO 27000/27001, ISO 31000, BSI IT-Grundschutz, DORA, and NIS2; additional frameworks mentioned in the source roles include NIST, OWASP, COBIT, ISAE 3402, and TIBER-EU.
  • Structured and independent working style, strong quality and sense of responsibility, excellent communication skills, and very good German language skills.

Experience

  • Several years of technical and/or organizational experience in information security, IT governance, or IT risk management; for security governance topics, knowledge of penetration testing governance, vulnerability management, and security incident management is relevant.
  • Experience with IT risk management methods and an understanding of technical security contexts, enabling you to present risks and complex issues in a way that is tailored to management, business departments, and technical teams.

What we offer

  • Work-life balance.
  • Promoting mental health.
  • Good transport links.
  • Individual workspace.
  • Location-dependent benefits (benefits such as parking and childcare are offered depending on the location).
  • Social events, company restaurant.
  • Preferential terms at the bank and partner businesses.
  • We offer a gross monthly salary (IT collective agreement) of EUR 4,000.00 per month (based on full-time employment of 38.5 hours per week). The actual salary depends on your qualifications and professional experience.

Benefits

Topics you will work on

Job locations

Map of the job locations
© OpenMapTiles, © OpenStreetMap contributors
  • Location Linz
    Oberösterreich, Austria

More about the recruiting agency

iTEC Informationssysteme AG is a renowned company in the field of personnel services, specializing in the placement of IT professionals. With years of experience, it offers efficient solutions for its clients' staffing needs.

Company type
Recruiting Agency
Work model
Onsite, Hybrid, Full Remote
Industry
Recruitment Agency
  • Fröling Heizkessel- und Behälterbau Ges.m.b.HGrieskirchen

    • Easy Apply
    • Hybrid
    • Onsite
    • Full Time

    We are one of the leading European manufacturers of innovative biomass heating systems (firewood, wood chips, pellets). Due to the strong demand for our products and the excellent future prospects for "renewable energy," we are expanding our team. ...

    • GitLab
    • Linux
    • C
    • Buildroot
    • C++
  • DIAMIR Vienna

    • Easy Apply
    • €50k – €60k
    • Hybrid
    • Onsite
    • Full Time

    End-to-End Development:You accompany exciting software projects from the initial requirements analysis through implementation (e.g., with Spring Boot) to successful deployment. Microservices & Architecture:You design and develop robust, highly scalable...

    • NoSQL
    • PostgreSQL
    • Kubernetes
    • Java
    • Maven
    • MySQL
    • Git
    • Docker
    • GitLab CI
    • Gradle
    • +6
    • +7
  • Sc24 Styll GmbhVienna

    • Easy Apply
    • Onsite
    • Full Time

    We are a modern IT service company and support corporate clients across all areas of IT infrastructure – from workstation systems and servers to networks, firewalls, and cloud solutions. To expand our team, we are looking for one IT Technician / IT...

    • VLAN
    • Azure
    • Microsoft 365
    • TCP/IP
    • Windows Server
    • SharePoint
    • VPN
    • WLAN
    • Active Directory
    • +5
    • +6

Senior Information Security & Risk Manager

iTEC Informationssysteme AG