Job
- Level
- Lead
- Location
- Vienna
- Working Model
- Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Salary
- from 60.150 € gross/year
Job Summary
In this role, you will be responsible for information security, develop the ISMS according to ISO 27001, coordinate security strategies, and lead a team to sustainably embed security practices.
Job Technologies
Your role in the team
- As Chief Information Security Officer (CISO) of ÖBB-Technische Services-GmbH (ÖBB-TS), you assume an effective steering and governance role for information security.
- You are responsible for all matters of information security, the management and continuous development of the ISMS according to ISO/IEC 27001:2022, as well as compliance with applicable legal and group-wide requirements, in particular NIS2/NISG 2026, and ensure adherence and coordination with the group's security policies and their guidelines.
- The position is not purely a technical security role.
- The focus is on strategic management, risk orientation, ISMS governance, organizational development, management consulting, as well as the sustainable integration of information security into IT, OT, workshops, facilities, locations, digital services, and collaboration with external partners.
- You are establishing the new organizational unit Cyber & Information Security with clear roles, responsibilities, services, interfaces, and decision-making processes, and you are further developing your team professionally and organizationally.
- You coordinate and monitor information security within ÖBB-TS, align the ISMS consistently with the PDCA cycle, and coordinate security objectives with corporate goals as well as management directives.
- You advise the management of the IT & Digitalization department on information security, risks, priorities, investments, strategic directives, and necessary decisions.
- You are responsible for the development, operation, and continuous improvement of the ISMS in accordance with ISO/IEC 27001 and for managing the implementation of requirements from NIS2/NISG 2026, RKEG, GDPR, as well as relevant group-wide directives.
- You initiate, coordinate, and manage the ÖBB-TS-wide information security risk management, including inventory and classification of IT/OT assets, as well as alignment with corporate risk management.
- You define valid methods, processes, standards, security requirements, roles, control mechanisms, escalation paths, and KPIs within ÖBB-TS and document these in the relevant ISMS policy frameworks.
- You manage and maintain the ÖBB-TS ISMS Master Document Index and coordinate IS regulations applicable across ÖBB-TS, including processes for deviations, non-conformities, exceptions, as well as corrective and improvement measures.
- You establish effective policies and processes for security incidents, legal early warnings, and reporting channels, coordinate the central reporting and information office, and inform management immediately in case of an incident.
- You initiate, coordinate, and monitor IT and OT emergency management, ensuring an effective interface with incident, crisis, and business continuity management.
- You lead the ISMS core team, coordinate the ÖBB-TS ISRM Board, formulate task definitions for specific IS working groups, and represent the IS organization internally and externally.
- You support and coach ISOs, IRM, decentralized ISBs, ISAs, asset managers, workshop equipment managers, and specialist departments in implementing measures and strengthen security awareness through targeted communication and awareness initiatives.
- You manage internal audits, risk analyses, management reviews, and IS key figure management, and prepare decision-making bases and reports for the executive management.
- You define security requirements for collaboration with external partners and suppliers, ensuring that critical know-how, risk decisions, and governance remain permanently anchored internally.
This text has been machine translated. Show original
Our expectations of you
Education
- You hold a HTL, FH, or university degree with a focus on IT security, computer science, business informatics, automation engineering, or a comparable qualification with several years of relevant professional experience.
- You have training as an Information Security Manager, for example ISO 27001 IS-Manager, and ideally experience as an IS Auditor or an equivalent qualification.
Qualifications
- You possess in-depth knowledge of relevant standards and guidelines, particularly ISO/IEC 27001, IEC 62443, NIST, NIS2/NISG 2026, RKEG, and GDPR; knowledge of COBIT, ITIL, or CRISAM is advantageous.
- You understand complex IT and OT environments, IT networks, OT control technology, and workshop processes, and you can translate technical risks into business impacts, priorities, and management-ready decisions.
- You impress with high analytical skills, conceptual strength, problem-solving competence, clear communication, team spirit, assertiveness, and resilience.
- You work independently, in a structured, service-oriented, and pragmatic manner, maintaining an overview even in complex situations and consistently bringing topics into implementation.
- You have very good German and English skills, both written and spoken.
- Ideally, you hold recognized certifications such as CISM, CISSP, CISA, ISO 27001 Lead Implementer, or Lead Auditor.
Experience
- You have several years of experience in information security, cyber security, ISMS implementation or ISMS operation, as well as proven experience in governance, risk management, audit control, and measures implementation.
- You have leadership experience or verifiable expertise in managing interdisciplinary teams, programs, and external partners.
This text has been machine translated. Show original
What we offer
- You can expect a responsible key position with significant scope for shaping in a technically demanding and socially relevant environment.
- You work closely with management, departments, and company-wide partners, and you can sustainably shape the development of a new security organization.
- For the position of "Expert:in Information Security Management," the minimum salary according to the collective agreement for employees of Austrian railway companies is € 60,150.16 gross per year for a full-time employment of 38.5 hours per week.
- Depending on qualifications and professional experience, overpayment may be possible, with an all-in agreement including flexible working hours provided for this position.
- An attractive flextime model and the possibility of telecommuting allow you to organize your free time more flexibly.
- Work-life balance is very important to us! On-site kindergartens in Vienna, nannys4ÖBB-kids, holiday childcare, vacations in ÖBB holiday homes, and more are just some of our great offerings.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
- 🏠Home Office
- 🍼Day Care for Kids
- ⏰Flexible Working Hours
- ⏸Educational Leave/Sabbatical
- 🚌Excellent Traffic Connections
Food & Drink
Health, Fitness & Fun
- 🏋🏿♂️Fitness Offers
- 🎳Team Events
- 🚲Bicycle Parking Space
- 👩⚕️Company Doctor
- 🙂Health Care Benefits
- 🧠Mental Health Care
Higher Take-Home Pay
Topics You Will Work On
Job Locations
About Your Employer
ÖBB-Konzern
Wien, Villach, Graz, Knittelfeld, Innsbruck, Wien, St. Pölten, Linz
The ÖBB Group consists of three publicly traded companies that fall under the strategic umbrella of the ÖBB Holding AG. This conglomerate covers all business sectors within modern mobility, making it a strong and environmentally friendly railway system for the future.
Description
- Company Size
- 250+ Employees
- Founding Year
- 1923
- Language
- German, English
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Logistics, Transportation
Employer reviews
by devworkplaces.com
Total
(3 Reviews)3.3
Career Growth
3.4Culture
3.6Workingconditions
3.6Engineering
2.8
Chief Information Security Officer & Team Lead Information Security
- Salary
- from 60.150 € gross/yearEstimated net salary based on the gross salary in the job ad.from 41.182 € net/year
- Location
- Vienna
- Working Model
- Onsite
- Diversity
- Open for all genders
- Easy Apply
- Easy Apply