ALTEN
RÖDL
Information Security Manager (m/f/d)
Automatic translation. Check the original.
About the opportunity
FOR OUR TEAM IN NUREMBERG
JOB ID 7468
We shape IT solutions and digital innovations from the inside out – creating a piece of the future every day from the heart of RÖDL. Become part of our IT teams and contribute your expertise in artificial intelligence, cloud computing, and cybersecurity to actively shape internal progress.
Your Responsibilities
- Responsibility for the development, implementation, and continuous improvement of the Information Security Management System (ISMS) in accordance with standards such as ISO/IEC 27001
- Development and updating of information security policies, procedures, and standards based on ISMS requirements and industry best practices
- Assessment of security risks related to the organization's information systems and development of strategies for risk mitigation and control within the ISMS framework
- Ensuring that the ISMS and associated security measures comply with legal and regulatory requirements as well as internal policies
- Monitoring compliance with ISMS policies and procedures
- Planning and conducting external audits to assess the effectiveness of the ISMS and identify areas for improvement
- Communication with new and existing suppliers, conducting risk management
- Training employees on the importance of information security and ISMS compliance, and promoting security awareness within the organization through training and sensitization campaigns.
- Continuous improvement of the ISMS and related processes
- Development, planning, and coordination of IT emergency drills/scenarios and identification of business-critical applications and services
Your Profile
- Successfully completed degree in Information Security or a comparable qualification
- Comprehensive understanding of ISMS standards such as ISO/IEC 27001 and their practical application
- Experience in developing and implementing ISMS policies, procedures, and measures
- Knowledge of risk management and experience in conducting risk assessments and management related to information security
- Excellent communication and training skills to promote security awareness within the organization
- Analytical thinking and problem-solving skills to address complex security issues
- Certifications such as ISO/IEC 27001 Lead Auditor, Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) are advantageous
Our Offer
- Hit the ground running: Structured onboarding, quick team integration, and early assumption of responsibility
- Long-term prospects: Clear career model, entrepreneurial opportunities, training for professional and personal development in our in-house academy
- Top conditions: Attractive salary, mobile working – including from selected European countries, flexible working hours, good work-life balance with 30 days of vacation on a 5-day week
- Shared experiences: Ski trips, team days, and company events
- Health and mobility: Contribution to EGYM Wellpass, broad health promotion, bike leasing, and a subsidy for the Deutschlandticket
