Information Security Officer

In this role you will support the CISO and ISOs in daily information security work and in initiatives that shape the global ISMS. You will drive risk analyses, maintain the ISMS framework, and guide security solutions to meet company goals. You’ll act as a global point of contact for IT security topics, translate complex issues for decision-makers, and promote an open risk/opportunity culture through awareness: training and internal events. This position offers cross-functional collaboration across IT and security teams in a dynamic, international environment.

• hybrid work model with flexible hours
• 30 days annual leave
• relocation support for Hannover
• lifelong learning program (training, seminars, language courses)
• company pension scheme
• mobility benefits (Deutschlandticket, JobRad)

• Support the CISO and Information Security Officers in daily activities and projects related to IT security and cybersecurity
• Operate and further develop the global ISMS and manage information security risks
• Serve as a global contact for IT security topics within the ISMS, maintain and enhance the framework, conduct risk analyses and assess non-conformities
• Define binding measures and maintain monitoring and reporting, including metrics
• Provide guidance on achieving information security goals and design/implement security solutions
• Assist in prioritizing activities in triage situations and explain complex issues clearly to decision-makers
• Engage with IT specialists to discuss technical solutions
• Support communication measures to foster a risk/opportunity culture (awareness training, presentations)

• Relevant professional experience in a control function (information risk or information security management)
• Experience in a global company and/or IT environment (preferred)
• Knowledge of frameworks such as ISO27001, NIST, ITIL; familiarity with regulatory requirements (VAIT/BAIT)
• Experience in at least two areas: security monitoring, platform security, operational resilience, cybercrime resilience, or change management
• German and English at business fluent level
• Willingness to occasional international travel
• Strong presentation and communication skills; results- and solution-focused mindset

• strong communication skills
• presentation skills
• problem-solving and analytical thinking
• security monitoring (threat intelligence, vulnerability scanning, penetration testing, SIEM)
• platform security (secure networks and systems)
• operational resilience (backup and recovery)