Information Security Senior Expert

Your role in the team

Our expectations of you

Qualifications

• Deep and broad expertise in the field of technical and organizational information security – especially the norms, standards and good practices relevant to information security (ISO 270xx family, COBIT, NIST, BSI IT-GS, etc.); ideally certifications according to ISO 270xx, CISA, CISM, CRISC)
• Excellent knowledge of IT and information risk management methods and processes based on common norms and standards (e.g. ISO 27005, BSI Grundschutz).
• Affinity to the key topics of IT asset management, information security management, risk management and business impact analysis / business continuity management.
• Analytical and holistic thinking skills as well as risk-oriented thinking
• Strong communication skills, decisiveness and negotiating skills

Experience

• Experience in establishing, operating and improving IT and information risk management methods and processes at customers
• Experience and enjoyment in documenting audit and assessment results and preparing reports
• Experience in the conception and planning of workshops and in the use of risk management tools