Job
- Level
- Experienced
- Job Field
- IT, System, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Salary
- from 3.783 € Gross/Month
- Location
- St. Pölten
- Working Model
- Onsite
Job Summary
In this role, you will support the enhancement of the ICT risk management system, conduct risk analyses, coordinate security reviews, and ensure compliance with IT security requirements for digital solutions.
Your role in the team
- In this responsible and varied position, you will support the Governance and Controlling Staff Unit of NÖ LGA - Shared Services GmbH, Digitalization Division, in the further development and operation of the established ICT risk management.
- Significant support in the further development and management of the company's internal IT risk management system in close coordination with the IT security officer.
- Overall coordination of the implementation of ICT risk analyses and technical ICT security assessments for core ICT services as well as relevant ICT services in healthcare facilities.
- Collection, preparation, assessment, and documentation of identified ICT risks and proposed measures in coordination with the responsible risk owner.
- Presentation of the analysis results to internal decision-makers.
- Ongoing, cross-service and cross-location tracking of coordinated risk mitigation measures.
- Specification and assurance of the appropriate consideration of ICT security requirements in the procurement of ICT hardware and software solutions, medical technology systems with ICT integration, as well as the conduct of ICT cloud security assessments.
- Conceptualization and operational coordination of a suitable framework for managing ICT security risks with contracted ICT service providers (audit/supplier management).
- Coordination and support of ICT service managers in implementing data protection regulations at NÖ LGA - Shared Services GmbH.
- Engagement and management of external IT service providers.
- Planning and controlling the budget for external services for the assigned areas of responsibility.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed university degree at Bachelor's level in Computer Science, Business Informatics, IT Security, Engineering with an IT focus, or Business Administration with an IT specialization, or an equivalent qualification.
Qualifications
- In-depth knowledge of information security frameworks (e.g., ISO/IEC 2700x, BSI IT-Grundschutz).
- Methodological competence in risk management (e.g., ISO/IEC 27005, threat modeling).
- Understanding of IT security architectures, complex IT infrastructures, and cloud architectures for risk assessment and development of risk mitigation measures.
- ISO/IEC 27001 Lead Implementer/Lead Auditor, CRISC, CISM, CISSP or ITIL preferred.
- Analytical and strategic thinking.
- Solution-oriented, meticulous work.
- High problem-solving skills.
- Independent working.
- Strong communication and consulting skills: ability to prepare complex issues appropriately for the audience (management vs. technical).
- Ability to work across disciplines.
- Excellent spoken and written proficiency in German and English.
- A prerequisite for employment with the State of Lower Austria is a clean criminal record.
Experience
- Practical experience in IT risk management, IT security management, or compliance knowledge in the development of risk analyses, emergency, and security concepts in operations.
- Experience with general regulatory requirements (e.g., NIS2, GDPR). Knowledge of sector-specific regulations (e.g., GTelG, MDR) is advantageous.
- Experience and knowledge of IT operations in healthcare facilities are advantageous.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Job Locations
Topics that you deal with on the job
This is your employer
NÖ Landesgesundheitsagentur
We are standing by the people of Niederösterreich as companions through all stages of life - from young to old, and providing everything they need from one source.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Public Service, Unions, Healthcare, Social Sector
IT risk manager / information security manager
- Salary
- from 3.783 € Gross/Month
- Location
- St. Pölten
- Working Model
- Onsite
