Business Information Security Officer (BISO)- m / f / d

METRO LOGISTICS; Hilden; Hybrid; EUR 50.000 - 90.000; Vollzeit

Zusammenfassung

Ein innovatives Unternehmen sucht einen erfahrenen Informationssicherheitsexperten, der leidenschaftlich daran interessiert ist, intelligente Lösungen für Kunden weltweit zu schaffen. In dieser Schlüsselrolle sind Sie verantwortlich für die Implementierung und Anpassung des Informationssicherheitsmanagementsystems, die Durchführung von Risikoanalysen und die Entwicklung von Schulungsprogrammen. Sie arbeiten eng mit dem lokalen Management und der CISO-Organisation zusammen, um sicherzustellen, dass alle Sicherheitsrichtlinien und -verfahren eingehalten werden. Wenn Sie in einem flexiblen und dynamischen Umfeld wachsen möchten, ist dies die perfekte Gelegenheit für Sie.

Leistungen

Flexible Arbeitszeiten

Remote-Arbeit

Mitarbeiterentwicklung

Qualifikationen

• Ausgezeichnete Kommunikationsfähigkeiten zur effektiven Interaktion mit verschiedenen Fachleuten.
• Erfahrung in der Entwicklung und Umsetzung von Informationssicherheitsrichtlinien.

Aufgaben

• Implementierung des METRO AG ISMS zur Sicherstellung der Einhaltung von Sicherheitsrichtlinien.
• Planung und Durchführung von IT- und IS-Risikoanalysen, einschließlich Drittrisiken.

Kenntnisse

Kommunikationsfähigkeiten

Risikomanagement

Compliance-Prinzipien

Agile Arbeitsmethoden

Ausbildung

Bachelor oder Master in Informatik

Bachelor oder Master in Cybersecurity

Bachelor oder Master in Betriebswirtschaft

Tools

ISO 27001

Jobbeschreibung

Today technology is driving the world. And at METRO.digital we are driving the technology for one of the leading international wholesalers specializing in food - METRO. From e-commerce to checkout, to delivery software, we work on a wide range of products to make each day a success for our customers and colleagues. With passion and ownership, we build the future of wholesale.

You are driving to create smart solutions for customers around the globe? You want to grow in a flexible environment? Let the right career opportunity find you and join us!

Job Description

How will you make an impact?

The purpose of the role is to ensure that the proper governance is in place in the respective local entity to align the information security strategy with our business strategy and to support the respective local entity to implement the needed organizational and technical measures to manage risks and regulatory obligations and to increase the overall level of maturity in regards of Information Security.

The role is directly exposed to local management to support and advise them on Information Security related topics. The role is closely collaborating with the CISO organization and provides critical insight and advice to shape, refine, and continuously improve the Information Security Strategy at METRO. The role is actively managing the relationship to local cybersecurity agencies (if needed) and might contribute actively to the local / national Information Security community. In case of a severe incident the role works closely with the local management and the CISO organization to coordinate the response and make informed decisions.

Your Responsibilities:

• Implement and adapt the METRO AG ISMS to secure the adherence of the local organization and partners to METRO AG ISMS, guidelines and requirements related to Information Security;
• Plan and coordinate the execution of IT and IS risk assessments (including Third-party risks);
• Develop and implement yearly action plan to reduce risks level and increase maturity level aligned with METRO continuous improvement process and ambitions set by METRO AG Board;
• Develop and execute awareness campaign and targeted training for all business functions in the local organization;
• Report IT and IS related information (risks, incidents, and KPIs) to the CISO organization;
• Oversee and coordinate incident response crisis management in relation to information security in collaboration with the CISO organization at METRO AG;
• Support the Legal department with evaluation of relevant information security local laws and regulations;
• Collaborate with the local Data Protection Officer (DPO) and Local Security Officer (LSO) to define, manage and improve relevant interfaces;
• Perform local Information Security assurance reviews (pen-testing, etc.);
• Manage the contact with local cybersecurity agencies (if needed).

Qualifications

Required key competencies and qualifications:

• You have excellent communication skills and can communicate effectively with people from a wide range of experiences and professional backgrounds;
• Bachelor’s or master’s degree in information technology / computer science / cybersecurity, business administration, or a related technical discipline;
• Experience leading the development and implementation of information security policies, procedures, and guidelines to ensure compliance with relevant regulations and standards;
• Strong knowledge of information security governance, risk management, and compliance principles, practices, and regulations;
• Have in-depth know-how in management systems, audits, and analyzing vulnerabilities and audit findings;
• Have in-depth know-how in ISO 27001 or comparable standards;
• You have solid experience working in an agile environment and that's where you feel at home.

Additional Information

What do we offer at METRO.digital?

• Flexible and remote work: create your own schedule!
• People development: when you grow so do we!
• Support with individual solutions: we are people-caring!

Want to know more about all our benefits?

Position grade within our career framework: Domain Owner (Md9).