Information Security Engineer (f_m_x)

GFZ Helmholtz Centre for Geosciences; Potsdam; Presencial; EUR 60 000 - 80 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Flexible working hours

Public service benefits

Extensive training opportunities

Diversity and equal opportunities

On-site day-care

Resumo da oferta

GFZ Helmholtz Centre for Geosciences is seeking an Information Security Engineer to advance security governance and architecture across Helmholtz IT services. The role focuses on architectural assessment, standards development, and collaboration with partners, reporting to the CISO.

Requires a Master’s degree or Diplom in CS/IT security and several years of security architecture experience, with strong German and English communication skills.

Qualificações

• Academic university degree (Master's degree or Diplom) in computer science, IT security or a comparable discipline.
• Several years of experience in information security or security architecture.
• Understanding of modern IT architectures: data centre operations, virtualization, network and cloud infrastructures.
• Very good communication and advisory skills; German C2 and English C1 (CEFR).

Responsabilidades

• Develop minimum standards and reference architectures with Helmholtz partners and support their implementation.
• Assess architectures for protection requirements, threats and failure scenarios; carry out architecture reviews.
• Assess the impact of the Cyber Resilience Act (CRA); derive required implementation measures and advise software teams.
• Bridge between the CISO and teams; translate ISMS requirements into actionable specifications.
• Contribute to handling IT security incidents and IT emergencies; conduct emergency exercises.
• Develop best practices and guidelines and present complex security topics to different audiences.

Conhecimentos

Security architecture

IT security

Governance

Communication

Formação académica

Master's degree or Diplom

Ferramentas

Data centre operations

Virtualisation

Network infrastructure

Cloud infrastructure

Descrição da oferta de emprego

The GFZ Helmholtz Centre for Geosciences is one of the world's leading institutions in the field of geosciences. As part of the Helmholtz Association, Germany's largest research organisation, we address global challenges such as natural hazards, climate change and the sustainable use of resources. In doing so, we combine cutting-edge research with social relevance. Our international staff – around 1,200 employees and approx. 500 guests – work in a multidisciplinary way and with a unique infrastructure to research the dynamic processes of the Earth system. Our vision: "Taking the pulse of the Earth to safeguard a habitable planet."\

In Department 5 – Geoinformation, We Are Looking For a

Information Security Engineer (f_m_x)

Reference Number 11444

GFZ has many years of experience in providing digital services to the international scientific community. This is built on an IT environment tailored to the requirements of scientific research settings, combining technical infrastructure, secure operations and sustainable service provision. Particular expertise lies in networking, identity and access management, and IT security.

Within the Helmholtz Federated IT Services (HIFIS), this experience is now to be transferred to further research fields. Together with the Helmholtz Centres, we are developing practical standards and implementation guidance that strengthen the cyber resilience of federated research IT.

For this purpose, we are looking for someone who combines technical understanding with security governance. The position reports to the Chief Information Security Officer (CISO) of GFZ and translates between technical and information security – both within GFZ and across the Helmholtz Association. The focus is on architectural assessment rather than depth in individual technologies.

Your Responsibilities

• You develop technical minimum standards and reference architectures together with Helmholtz partners and support their implementation
• You assess architectures for protection requirements, threats and failure scenarios, and carry out architecture reviews
• You assess to what extent GFZ and the Helmholtz Centres are affected by the Cyber Resilience Act (CRA), derive the required implementation measures and advise software development teams
• You form the professional bridge to the CISO: you put technical matters into context and translate ISMS requirements into actionable specifications
• You contribute actively to handling IT security incidents and IT emergencies at GFZ and conduct emergency exercises
• You develop best practices and guidelines and prepare complex security topics in a way that suits the respective audience

About You

Essential Qualifications:

• Academic university degree (Master's degree or German university Diplom) in computer science, IT security or a comparable discipline
• Several years of experience in information security or security architecture, as well as the ability to assess IT architectures and to explain technical matters appropriately for the respective audience. Specialist depth in individual technologies is not required
• An understanding of modern IT architectures: data centre operations, virtualisation, network and cloud infrastructures
• Sound knowledge of the relevant standards and regulations (BSI IT-Grundschutz, ISO/IEC 2700x, NIS2, Cyber Resilience Act) and of IT emergency management in accordance with BSI Standard 200-4
• Very good communication and advisory skills when dealing with both technical and non-technical audiences; German at level C2 and English at level C1 (CEFR), spoken and written

Desirable Qualifications

• Experience in the research, higher education or public sector, as well as with federated and open-source environments
• Experience in advising software development teams on secure development
• Certifications with an architectural and hands‑on focus, e.g. SABSA, TOGAF, CCSP, CISSP, BSI IT‑Grundschutz Practitioner or ISO/IEC 27001 Lead Implementer
• Knowledge of BCM, IT emergency planning and recovery strategies for central IT components

Passion and potential matter to us!

What We Offer

• Ambitious and varied tasks in a dynamic and international research environment
• State‑of‑the‑art equipment
• Public service benefits
• Extensive training opportunities
• Flexible working hours and conditions
• Support with finding a good work‑life balance offered by benefit@work
• Institute day‑care centre on site
• Working at the Albert Einstein Science Park on the Telegrafenberg in Potsdam
• Workplace within walking distance of Potsdam main train station, or just a short ride on the shuttle bus

Start date: As soon as possible

Fixed-term: 2 years (with the option to apply for a permanent employment contract within the fixed‑term period)

Salary: The position is classed as salary group 13 according to "TVöD Bund". The salary group is determined on the basis of the Collective Wage Agreement and the respective personal qualifications.

Working hours: Full-time (currently 39 h/week); The position is generally suitable for part‑time work.

Place of work: Potsdam

Important Technical Note: Currently, email addresses associated with domains such as @hotmail.com, @outlook.com, or @live.de may experience occasional delays or restrictions in receiving messages. To ensure smooth communication during the application process, we recommend using an alternative email address and providing an additional contact method (e.g., a phone number).

The GFZ actively promote diversity and equal opportunities. We explicitly welcome applications from all qualified individuals, regardless of ethnic and social origin, nationality, gender, sexual orientation and identity, religion/belief, age, and physical or neurodiverse abilities.

"Diversity in perspectives" is one of GFZ's core values. As an integral part of supporting diversity at our centre, we actively promote women in science and in leadership positions. To know more about our Diversity policies, contact the diversity team. If you need more information about our gender equality policies, please do not hesitate to contact our Equal Opportunities Officer and check our Equal Opportunities Plan & Cascade Model.

We look forward to applications from people who enjoy working in diverse teams, where everyone feels respected and valued and can fully develop their own talents. Applicants with severe disabilities and equalised persons will receive preferential consideration if equally qualified.

Data protection information for applicants

In case of any further queries regarding the field of activity, please contact Dorit Kerschke via email. If you have any general questions about the application process, please contact our recruiting team at our phone number [phone]‑28787.

www.gfz.de