Information Security Engineer (f_m_x)

Gfz Potsdam; Potsdam; Hybrid; EUR 62.000 - 78.000; Vollzeit

Benefits dieser Stelle

International environment

Training opportunities

Flexible working hours

On-site day-care

Zusammenfassung

GFZ Helmholtz Centre for Geosciences in Potsdam seeks an Information Security Engineer (f_m_x) to join Department 5 – Geoinformation. You translate security needs into actionable specifications and bridge technical and governance aspects.

You will develop minimum standards and reference architectures with Helmholtz partners, assess architectures for protection requirements, advise software teams, and coordinate with the CISO and HIFIS.

Qualifikationen

• Academic university degree in computer science, IT security or a comparable discipline.
• Several years of experience in information security or security architecture, able to explain technical matters to diverse audiences.
• Understanding of modern IT architectures: data centre operations, virtualization, networks and cloud infrastructures.
• Knowledge of standards and regulations (BSI IT-Grundschutz, ISO/IEC 2700x, NIS2, Cyber Resilience Act) and IT emergency management per BSI 200-4.
• German C2 and English C1 (spoken and written).

Aufgaben

• Develop technical minimum standards and reference architectures with Helmholtz partners and support their implementation.
• Assess architectures for protection requirements, threats and failure scenarios, and carry out architecture reviews.
• Assess impacts of CRA and advise software development teams with required implementation measures.
• Bridge the CISO by translating ISMS requirements into actionable specifications.
• Contribute to handling IT security incidents and IT emergencies and conduct exercises.
• Develop best practices and guidelines for security topics tailored to audiences.

Kenntnisse

Information security

Security architecture

Communication skills

German C2

English C1

Ausbildung

Master's degree in CS/IT security

Jobbeschreibung

The GFZ Helmholtz Centre for Geosciences is one of the world's leading institutions in the field of geosciences. As part of the Helmholtz Association, Germany's largest research organisation, we address global challenges such as natural hazards, climate change and the sustainable use of resources. In doing so, we combine cutting‑edge research with social relevance. Our international staff – around 1,200 employees and approx. 500 guests – work in a multidisciplinary way and with a unique infrastructure to research the dynamic processes of the Earth system. Our vision: “Taking the pulse of the Earth to safeguard a habitable planet.”

In Department 5 – Geoinformation, we are looking for an:

Information Security Engineer (f_m_x)

Reference Number 11444

GFZ has many years of experience in providing digital services to the international scientific community. This is built on an IT environment tailored to the requirements of scientific research settings, combining technical infrastructure, secure operations and sustainable service provision. Particular expertise lies in networking, identity and access management, and IT security.

Within the Helmholtz Federated IT Services (HIFIS), this experience is now to be transferred to further research fields. Together with the Helmholtz Centres, we are developing practical standards and implementation guidance that strengthen the cyber resilience of federated research IT.

For this purpose, we are looking for someone who combines technical understanding with security governance. The position reports to the Chief Information Security Officer (CISO) of GFZ and translates between technical and information security – both within GFZ and across the Helmholtz Association. The focus is on architectural assessment rather than depth in individual technologies.

Your responsibilities:

• You develop technical minimum standards and reference architectures together with Helmholtz partners and support their implementation
• You assess architectures for protection requirements, threats and failure scenarios, and carry out architecture reviews
• You assess to what extent GFZ and the Helmholtz Centres are affected by the Cyber Resilience Act (CRA), derive the required implementation measures and advise software development teams
• You form the professional bridge to the CISO: you put technical matters into context and translate ISMS requirements into actionable specifications
• You contribute actively to handling IT security incidents and IT emergencies at GFZ and conduct emergency exercises
• You develop best practices and guidelines and prepare complex security topics in a way that suits the respective audience

About You:

Essential Qualifications:

• Academic university degree (Master's degree or German university Diplom) in computer science, IT security or a comparable discipline
• Several years of experience in information security or security architecture, as well as the ability to assess IT architectures and to explain technical matters appropriately for the respective audience. Specialist depth in individual technologies is not required
• An understanding of modern IT architectures: data centre operations, virtualisation, network and cloud infrastructures
• Sound knowledge of the relevant standards and regulations (BSI IT‑Grundschutz, ISO/IEC 2700x, NIS2, Cyber Resilience Act) and of IT emergency management in accordance with BSI Standard 200-4
• Very good communication and advisory skills when dealing with both technical and non‑technical audiences; German at level C2 and English at level C1 (CEFR), spoken and written

Desirable Qualifications:

• Experience in the research, higher education or public sector, as well as with federated and open‑source environments
• Experience in advising software development teams on secure development
• Certifications with an architectural and hands‑on focus, e.g. SABSA, TOGAF, CCSP, CISSP, BSI IT‑Grundschutz Practitioner or ISO/IEC 27001 Lead Implementer
• Knowledge of BCM, IT emergency planning and recovery strategies for central IT components

What we offer:

• Ambitious and varied tasks in a dynamic and international research environment
• State‑of‑the‑art equipment
• Public service benefits
• Extensive training opportunities
• Flexible working hours and conditions
• Support with finding a good work‑life balance offered by benefit@work
• Institute day‑care centre on site
• Working at the Albert Einstein Science Park on the Telegrafenberg in Potsdam
• Workplace within walking distance of Potsdam main train station, or just a short ride on the shuttle bus

Start date: As soon as possible
Fixed‑term: 2 years (with the option to apply for a permanent employment contract within the fixed‑term period)
Salary: The position is classed as salary group 13 according to “TVöD Bund ”. The salary group is determined on the basis of the Collective Wage Agreement and the respective personal qualifications.
Working hours: Full‑time (currently 39 h/week); The position is generally suitable for part‑time work.
Place of work: Potsdam

Have we piqued your interest?

If so, we look forward to receiving your application by 11th October 2026.

Required documents: CV and cover letter, certificates/grades

The GFZ actively promote diversity and equal opportunities. We explicitly welcome applications from all qualified individuals, regardless of ethnic and social origin, nationality, gender, sexual orientation and identity, religion/belief, age, and physical or neurodiverse abilities.

“Diversity in perspectives” is one of GFZ's core values. As an integral part of supporting diversity at our centre, we actively promote women in science and in leadership positions. To know more about our Diversity policies, contact the diversity team. If you need more information about our gender equality policies, please do not hesitate to contact our Equal Opportunities Officer and check our Equal Opportunities Plan & Cascade Model.

We look forward to applications from people who enjoy working in diverse teams, where everyone feels respected and valued and can fully develop their own talents. Applicants with severe disabilities and equalised persons will receive preferential consideration if equally qualified.

Data protection information for applicants

In case of any further queries regarding the field of activity, please contact Dorit Kerschke via email. If you have any general questions about the application process, please contact our recruiting team at our phone number [phone].