Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Salary
- from 60.150 € Gross/Year
- Location
- Vienna
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop the information security level, plan and operate ISMS, assess IT projects, and create recommendations for security measures. You will also be the contact person for security incidents and conduct audits.
Your role in the team
- You implement measures to ensure the integrity, confidentiality, and availability of information based on analyses and specifications, and actively develop the level of information security within your area of responsibility.
- You plan, implement, and operate the Information Security Management System (ISMS) for internal partners and support its further development.
- You evaluate IT projects, services, applications, architectures, configurations, access requirements, and security-related processes in terms of protection needs, risks, compliance, and necessary security measures.
- You create reports, decision-making bases, and action recommendations regarding threats, measures, residual risks, and necessary information security measures for decision-makers and executive management.
- You develop concepts, policies, training materials, and training sessions, thereby supporting the sustainable integration of information security within the organization.
- You plan, initiate, conduct, and oversee internal and external audits, security assessments, and penetration tests in close coordination with relevant stakeholders.
- You assist in the handling of security incidents and lead or support projects or work packages with a focus on information security.
- You are the central point of contact for information security in the areas you oversee, participate in coordination and decision-making platforms, and support or represent the CISO in relevant committees as needed.
This text has been machine translated. Show original
Our expectations of you
Education
- You possess solid knowledge in the field of information security and in the operation or further development of an ISMS – ideally based on a completed technical university degree or equivalent professional experience.
Qualifications
- You are familiar with the relevant norms, standards, and regulatory requirements and are confident in their application, particularly in the ISO/IEC 27000 series (including ISO/IEC 27001:2022 and ISO/IEC 27002:2022), the IEC 62443 series, the BSI IT-Grundschutz (especially BSI standards 200-1 to 200-3), GDPR, the NIS-2 Directive or the Austrian NISG 2026, as well as relevant audit standards such as ISAE 3402.
- Ideally, you hold certifications in the field of information security, such as CISA, CISM, or CISSP.
- You work analytically, in a structured and independent manner, present yourself confidently and solution-oriented, and know how to build trust and acceptance with different stakeholders.
- You are communicative in technical and professional aspects, confident in moderation, team-oriented, and willing to take responsibility even in complex projects.
- You also have good spoken and written English skills.
Experience
- You bring several years of relevant professional experience in comparable roles, such as in Information Security Management, IT Security, IT Operations, or Audit environments.
This text has been machine translated. Show original
What we offer
- We offer an international corporate environment with ongoing development and training opportunities.
- Role-specific certifications are supported.
- We offer you a modern workplace with excellent public transportation connections.
- Numerous benefits (special conditions for train travel & in our travel agencies, holiday homes and apartments in popular domestic holiday regions, in-house car sharing).
- We offer flexible working hours, home office options, and also provide a nanny service such as an on-site company kindergarten nearby.
- For the position of "Expert Information Security Management," a minimum gross annual salary of € 60,150.16 is provided according to the collective agreement for railway companies.
- Depending on qualifications and professional experience, overpayment is possible, with an all-in agreement including flexible working hours in this position.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
- 🏠Home Office
- 🍼Day Care for Kids
- ⏰Flexible Working Hours
- ⏸Educational Leave/Sabbatical
- 🚌Excellent Traffic Connections
Food & Drink
Health, Fitness & Fun
- 🏋🏿♂️Fitness Offers
- 🎳Team Events
- 🚲Bicycle Parking Space
- 👩⚕️Company Doctor
- 🙂Health Care Benefits
- 🧠Mental Health Care
More net
Topics that you deal with on the job
Job Locations
This is your employer
ÖBB-Konzern
Wien, Villach, Graz, Knittelfeld, Innsbruck, Wien, St. Pölten, Linz
The ÖBB Group consists of three publicly traded companies that fall under the strategic umbrella of the ÖBB Holding AG. This conglomerate covers all business sectors within modern mobility, making it a strong and environmentally friendly railway system for the future.
Description
- Company Size
- 250+ Employees
- Founding year
- 1923
- Language
- German, English
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Logistics, Transportation
Dev Reviews
by devworkplaces.com
Total
(3 Reviews)3.3
Career Growth
3.4Engineering
2.8Workingconditions
3.6Culture
3.6
Information Security Officer
- Salary
- from 60.150 € Gross/Year
- Location
- Vienna
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
- Easy Apply
- Easy Apply