Information Security Compliance & Audit (m / f / d) in Saarbrücken (37981482)

ODDO BHF; Saarbrücken; Vor Ort; EUR 60.000 - 80.000; Vollzeit

Zusammenfassung

Ein führendes Finanzinstitut in Saarbrücken sucht einen Compliance- und Informationssicherheits-Spezialisten, um die Einhaltung von Sicherheitsstandards zu gewährleisten und Risiken zu identifizieren. Die Rolle umfasst die Definition von Prüfplänen und die Überwachung von Sicherheitsmaßnahmen. Bewerber sollten einen Universitätsabschluss in Informatik oder einem verwandten Bereich sowie Erfahrung im Informationssicherheitsmanagement vorweisen können. Dies ist eine Vollzeitstelle mit spannenden Aufgaben.

Qualifikationen

• Erfahrungen im ISM-Kontrollsystem.
• Erfahrung in technischen Kontrollen und Sicherheitsüberprüfungen.
• Kenntnisse über Sicherheitsrahmenwerke wie SWIFT, PCI DSS.

Aufgaben

• Definition und Durchführung von Informationssicherheitsprüfungen.
• Überwachung und Bewertung der Wirksamkeit der Compliance-Prozesse.
• Kommunikation mit Prozessverantwortlichen zur Identifizierung von Sicherheitsrisiken.

Kenntnisse

Zusammenarbeit mit anderen Abteilungen

Kenntnisse über Informationssicherheitsstandards

Technische Zertifizierungen in Informationssicherheit

Ausbildung

Universitätsabschluss in Informatik / Informationssicherheit

Jobbeschreibung

Aufgaben

This position assists Compliance and Information Security in providing independent internal control

evaluations, auditing, monitoring, and reviewing activities performed by the 1st line of defense, including

3rd party providers / outsourcing on regards to information security relevant domains.

This role will work to ensure ongoing information security compliance by identifying information security

risks or non-compliances against the internal information security baseline, industry security standards

and frameworks, relevant laws and regulations, and industry best practices. This position also assists in

maintaining and developing appropriate policies, procedures, and other relevant documentation to

Information Security Compliance Evaluation functions and the whole organization.

Exciting tasks await you :

• ? Define and execute information security audit / control plans on ODDO BHF’s ecosystem internally and for external suppliers / outsourcing, by identifying the control objectives in conformity with information security related standards (ISO x, BSI, NIST etc.)
• Define and execute the plan for monitoring and reviewing the results of self-assessment process on a risk-based approach
• Verify the implementation status of control objectives and applicable security requirements by checking the provided evidence in support to the evaluation
• Monitor the effectiveness of the compliance evaluation processes in accordance with agreed metrics and performance measures to drive continuous improvements
• Prepare IS Compliance reports and status reports, by documenting the identified information security non-compliances
• Actively communicate to asset / process owners and other stakeholders with the goal of identifying the information security non-compliances on regards to 3rd parties suppliers / outsourcing
• Develop and maintain the policies, procedures, manuals, guidelines relevant to IS Compliance Evaluation function

Anforderungsprofil

• ? University degree in Computer Science / Information Security or related technical fields
• Proven track record of work experience in ISM Control System related job positions
• Knowledge and experience on information security standards such as ISO x, BSI, NIST
• Experience on planning and performing technical controls, monitoring and reviewing software and hardware security, and organizational controls
• Ability to collaborate with other departments and stakeholders
• Technical certifications in Information Security and IT Audit
• y experience in same or similar positions in Financial Institutions
• Knowledge and / or experience on information security frameworks such as SWIFT, PCI DSS, SOX, DORA
• ? A passion for accuracy and translating insights into a compelling narrative; able to maintain a balance between the details and the larger picture.