Define local and implement the global security strategy in accordance with external and internal requirements, working closely with the relevant business units and corporate security teams
Own integrated security risk management and reporting in line with group policies
Manage local security incidents, emergencies and crisis situations
Conduct local internal security audits and coordinate external audits, and lead remediation measures to address corrective actions
Promote information sharing about major threats, vulnerabilities and risks within GS
Approve GS policies, security-related directives and processes that align with the corporate security strategy
Manage major security-related incidents, emergencies and crises
Serve as a point of contact for GS IT to advise on global projects regarding architecture and policy compliance

Master’s degree in Computer Science, Security/Information Security or a related field
Several years of professional experience in security roles
Experience with internal investigations and incident management
Experience in physical security (access control/ID systems, video surveillance, etc.) and personal security (handling criminal record checks, background screening for hires/contracting, etc.)
Relevant certifications in information security management are mandatory (e.g., CISSP, ISO/IEC 27000-series)
Knowledge and hands-on experience applying relevant standards and norms, e.g., ISO 27xxx, Common Criteria, PCI-CPP and GSMA-SAS guidelines, NIST Cybersecurity Framework
Ability to communicate security issues in an audience-appropriate manner
Solid knowledge of risk management processes
Ability to develop and defend technical recommendations and budget plans
Strong knowledge of core ITIL process standards
IT and security architecture expertise
Excellent German and English skills, both written and spoken
Willingness to travel
Excellent communication and teamwork skills and a customer-oriented mindset

A wide range of training and development opportunities
Flexible working hours, home office and 30 days of annual leave
A company pension plan as part of an attractive compensation package
Attractive family benefits, including a summer holiday program for children of G+D employees

Chief Information Security Officer, CISO

Key skills