Business Information Security Officer (m/f/d)

In this role you partner with business units to align cybersecurity with business goals, translating technical risk into actionable guidance. You’ll lead risk governance, advise on compliance, and support security programs that enable growth and customer success. You’ll work across business, IT, and cybersecurity teams in an international environment to foster a culture of security-minded decision-making. This is a strategic, business-enabling security leadership position with global impact.

• 30 days of vacation
• Up to 10 days Workation
• Flexible and hybrid work arrangements
• Allianz supplementary health insurance
• Company pension scheme
• Job Bike leasing program

• Act as the primary information security advisor for assigned business units
• Advise leaders on cybersecurity, risk management, and regulatory matters
• Conduct risk assessments and recommend security controls
• Translate technical risks into business impacts and actionable recommendations
• Drive governance, risk, and compliance activities within business units
• Support vulnerability management, baseline adoption, and risk mitigation
• Provide security expertise for customer engagements, sales, and audits
• Support certification and regulatory compliance initiatives (ISO 27001, NIS2, CMMC, PCI DSS, GDPR)
• Represent business interests in cybersecurity and IT discussions
• Promote a risk-aware, security-focused culture across the organization

• Bachelor’s degree in a related field or equivalent professional experience
• Minimum 8 years in IT with at least 4 years in cybersecurity, IT risk management, or information security
• Strong knowledge of information security, risk management, and governance frameworks (e.g., NIST, CIS)
• Experience with compliance programs, audits, and regulatory requirements
• Ability to communicate complex topics to executives
• Knowledge of modern IT architectures, cloud technologies, and DevSecOps is advantageous
• Certifications such as CISSP, CISM, or CRISC preferred
• Fluent English (written and spoken)

• Effective communication with executive stakeholders
• Cross-functional collaboration
• Strategic thinking and advisory skills
• Information security governance
• Risk management frameworks (NIST, CIS)
• Regulatory compliance (ISO 27001, NIS2, CMMC, PCI DSS, GDPR)