Job
In this role, you will enhance the Information Security Management System, conduct risk analyses, create policies, and coordinate audits to ensure security and compliance across the organization.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Establishment, maintenance, and continuous development of the Information Security Management System based on the ISO/IEC 27000 series, while ensuring consistent security governance across all ORF business units.
- Implementation and monitoring of all relevant regulatory requirements.
- Conducting and coordinating company-wide information security risk assessments, risk treatment measures, and residual risk acceptance processes.
- Creation, updating, and management of security policies, standards, and procedures.
- Planning and coordination of internal and external audits, documentation, and follow-up on actions.
- Contribute to the development and operation of a Vendor Risk Management process.
- Identification and remediation of security gaps and vulnerabilities (security metrics).
- Reporting to the CISO.
Our expectations of you
Education
- Completed degree in information security, business informatics, or a comparable qualification.
Qualifications
- Very good understanding of current regulations (NIS2 Directive and CRA).
- Knowledge of risk management, audit methodology, and compliance assessments.
- Certifications: CISM, CISA, CRISC, etc.
- Excellent communication skills: ability to explain complex topics clearly.
- Structured, self-directed approach to work with a strong commitment to quality.
- Resilience and pragmatism: seeing compliance not as an end in itself, but as an enabler.
- Very good German skills and good written and spoken English skills.
- A team-oriented mindset combined with the ability to drive projects forward independently.
Experience
- Several years of professional experience in the GRC field.
- In-depth knowledge of ISO/IEC 27000, hands-on experience implementing an ISMS, and experience with and knowledge of GRC tools.
- Experience in the media or broadcasting industry is an advantage.
- Experience in stakeholder management across different levels of seniority.
What we offer
- An exciting work environment at one of Austria’s most prominent media companies.
- The opportunity to play a key role in shaping the digital transformation of public broadcasting.
- Attractive professional development opportunities and a collegial work environment.
- Gross annual salary: According to KV14, at least EUR 57,554.98 in salary group 6 (including special payments and irregularity allowance); a higher salary depends on experience and qualifications.
- Work location: Vienna.
- Working hours: 40 hours per week, irregular shifts.
Benefits
Work-Life-Integration
Health, fitness & fun
Higher take-home pay
Food & drink
Topics you will work on
Job locations
About your employer
The Austrian Broadcasting Corporation (ORF) is a public foundation with its main headquarters in Vienna. It's the biggest media provider in Austria and operates nine Regional Studios as well as one studio each in Bozen, Italy and Basel, Switzerland.
- Established Company
- Hybrid, Onsite
- Media, Publishing
Employer reviews
- Working conditions
- 4.1
- Career growth
- 4.2
- Team culture
- 3.8
- Engineering
- 3.7
More jobs
These jobs might also interest you
Do you enjoy diving deep into code and want to build a product that truly makes an impact? With us, you work hands-on on an AI platform that combines SaaS and on-premises, exclusively relies on open source, and successfully implements AI on-prem and...
We are a modern IT service company and support corporate clients across all areas of IT infrastructure – from workstation systems and servers to networks, firewalls, and cloud solutions. To expand our team, we are looking for one IT Technician / IT...
End-to-End Development:You accompany exciting software projects from the initial requirements analysis through implementation (e.g., with Spring Boot) to successful deployment. Microservices & Architecture:You design and develop robust, highly scalable...
