Job
- Level
- Senior
- Job Field
- IT, Project, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Salary
- from 53.898 € Gross/Year
- Location
- Amstetten
- Working Model
- Onsite
Job Summary
In this role, you will develop an ISMS according to ISO/IEC 27001, support audits, and drive information security measures in subsidiaries while collaborating closely with internal and external stakeholders.
Job Technologies
Your role in the team
- As a Senior Information Security Manager, you will support Doka's subsidiaries and sister companies in the development, implementation, and operation of an effective Information Security Management System (ISMS) in accordance with ISO/IEC 27001.
- They accompany certification and surveillance audits, manage the resolution of audit findings, and ensure the sustainable development of the ISMS.
- The role is designed as an internal corporate service and provides support as needed across different companies.
- They report directly to the Group CISO.
- Development, implementation, and operation of an ISMS according to ISO/IEC 27001 in subsidiaries and sister companies of Doka (including the implementation of a pragmatic action plan up to certification readiness).
- Preparation, coordination, and support of certification and surveillance audits, including collaboration with external certifiers.
- Consideration and integration of relevant regulatory requirements (e.g., NIS-2 aspects) within the framework of ISO-27001 implementation and ongoing ISMS operations.
- Conducting risk assessments (Risk Assessments / Business Impact Analyses) as well as deriving pragmatic measures.
- Control and tracking of the resolution of audit findings.
- Development and maintenance of management reporting, KPI sets, and evidence of the maturity level of information security.
- Consulting and support for Doka's subsidiary and sister companies on information security topics.
- Development and adaptation of information security policies and security baselines in coordination with relevant stakeholders.
- Support in the further development and improvement of the corporate ISMS.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree (e.g., Computer Science, Business Informatics, Information Security) or equivalent qualification.
Qualifications
- Knowledge of technical security solutions (e.g., IAM, network/perimeter security, encryption, logging/monitoring).
- Strong project and change management skills; structured and pragmatic working approach.
- Very good spoken and written German and English skills.
- Advantageous: Certifications such as ISO 27001 Lead Implementer / Lead Auditor, CISM, CISSP, CISA.
Experience
- Several years of relevant professional experience in the development and operation of ISMS (ISO 27001) as well as in certification processes.
- Knowledge of regulatory requirements and the ability to pragmatically implement them within an ISMS; experience with NIS-1 is an advantage.
- Experience in Governance, Risk & Compliance, audit processes, as well as cross-functional collaboration with management and business units.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
- 🕺No Dresscode
- 🅿️Employee Parking Space
- 🙅♂️No All-In Contracts
- ⏸Educational Leave/Sabbatical
- 🚌Excellent Traffic Connections
- 🍼Day Care for Kids
- ⏰Flexible Working Hours
- 🏠Home Office
Health, Fitness & Fun
- 🚲Jobbike
- 👨🏻🎓Mentor Program
- 🚲Bicycle Parking Space
- 👩⚕️Company Doctor
- 🎳Team Events
- 🧘♀️Massage, Yoga, etc.
- 🏋🏿♂️Fitness Offers
- 🙂Health Care Benefits
More net
Food & Drink
Job Locations
Topics that you deal with on the job
This is your employer
Doka GmbH
Amstetten, Wien, Linz
Doka is one of the world's leading companies for innovative formwork solutions and services in all areas of construction. In addition, the company is a global provider of scaffolding solutions for a variety of applications. Doka is an Umdasch Group company that has been synonymous with reliability, experience and true hand-shake quality for over 150 years.
Description
- Company Size
- 250+ Employees
- Founding year
- 1868
- Language
- German, English
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Industry, Production
Dev Reviews
by devworkplaces.com
Total
(2 Reviews)3.5
Culture
4.1Engineering
3.0Workingconditions
3.7Career Growth
3.5