Information Security Officer

Utimaco; Düsseldorf; Hybrid; EUR 90.000 - 150.000; Vollzeit

Benefits dieser Stelle

Flexible working model

Extra vacation days on anniversaries

Diversity & inclusion

Zusammenfassung

Utimaco is an international provider of IT security solutions and cybersecurity technologies with headquarters in Aachen (Germany) and Campbell (USA). We are the world's leading manufacturer of hardware security modules and compliance solutions; join us to help make the digital world more secure.

Utimaco seeks an experienced Information Security Manager to lead ISMS, risk assessments, audits, and regulatory reviews across our multinational organization.

Qualifikationen

• Bachelor’s degree in information security, cybersecurity, IT, engineering, risk management, or a related discipline; equivalent experience may be considered.
• Typically 5–8 years of relevant experience in information security, IT risk, governance, operations, audit, or compliance.
• Experience in international, matrixed organizations with regulatory requirements.
• Practical experience with risk assessments, controls, audits, remediation tracking, and incident response.
• Knowledge of GDPR and data protection expectations is desirable.
• Fluency in English; German proficiency is a plus.

Aufgaben

• Manage and contribute to the continuous improvement of the ISMS framework, policies, standards, and procedures.
• Coordinate information security risk assessments, risk treatment plans, and risk acceptance processes.
• Maintain the security risk register and report key risks, trends, and remediation progress to management.
• Support the operation and continual improvement of the ISMS.
• Prepare for and support internal and external audits, certifications, and regulatory reviews.
• Monitor compliance with applicable legal, regulatory, contractual, and internal security requirements.
• Coordinate incident preparedness, including security incident procedures, exercises, and follow‑up actions.
• Support vulnerability, threat, access, asset, and third‑party security management activities.
• Promote secure working practices through security awareness training and guidance.
• Advise project/product teams on security requirements, secure design, data protection, and risk‑based controls.
• Contribute to business continuity, disaster recovery, and organizational resilience planning.
• Define and track meaningful security metrics and management reports.
• Work with stakeholders to ensure security findings and audit actions are prioritized and closed.

Kenntnisse

English fluency

German desirable

Stakeholder coordination

Security governance

ISMS knowledge

Ausbildung

Bachelor’s degree in information security / related field

Tools

GDPR knowledge

Audit tools

Jobbeschreibung

Utimaco is an international provider of IT security solutions and cybersecurity technologies with headquarters in Aachen (Germany) and Campbell (USA). For over 40 years, we have been developing innovative solutions for the protection of people, data and communications that meet the highest standards. We are the world's leading manufacturer of hardware security modules and compliance solutions in a wide range of industries such as automotive, banking, telecommunications and many more. With our global network of partners and customers, we contribute to making digital information and infrastructures secure worldwide. Become part of our team and help us make the digital world more secure - together we are shaping the future of IT security.

Key Responsibilities

• Manage/Contribute to the continuous improvement of the information security management framework, policies, standards, and procedures.
• Coordinate information security risk assessments, risk treatment plans, and risk acceptance processes.
• Maintain the security risk register and report key risks, trends, and remediation progress to management.
• Support the operation and continual improvement of the Information Security Management System (ISMS).
• Prepare for and support internal and external security audits, certifications, customer assessments, and regulatory reviews.
• Monitor compliance with applicable legal, regulatory, contractual, and internal security requirements.
• Coordinate incident preparedness, including security incident procedures, exercises, lessons learned, and follow‑up actions.
• Support vulnerability, threat, access, asset, and third‑party security management activities.
• Promote secure working practices through security awareness training, communications, and targeted guidance.
• Advise project and product teams on security requirements, secure design, data protection, and risk‑based controls.
• Contribute to business continuity, disaster recovery, and organizational resilience planning.
• Define and track meaningful security metrics and management reports.
• Work with stakeholders to ensure security findings and audit actions are prioritized and closed effectively.
• Keep current with relevant threats, standards, regulatory developments, and industry practices.

Qualifications

• Bachelor’s degree in information security, cybersecurity, computer science, information technology, engineering, risk management, or a related discipline; equivalent professional experience may be considered.
• Typically 5-8 years of relevant experience in information security, cybersecurity, IT risk, security governance, security operations, audit, compliance, or a related field.
• Experience working in an international, matrixed, regulated, technology‑driven, or multi‑site organization.
• Practical experience with information security risk assessments, control implementation, security policies, audit support, and remediation tracking.
• Experience supporting security incident response, vulnerability management, access governance, business continuity, or cyber resilience activities.
• Experience working with European privacy and security requirements; practical knowledge of GDPR and German data protection expectations is desirable.
• Experience coordinating stakeholders across multiple countries and functions.
• Experience with third‑party risk assessments, supplier due diligence, or customer security questionnaires is advantageous.
• Experience in security awareness, training, communications, or security culture programs is advantageous.
• Relevant professional certifications are desirable, such as CISSP, CISM, CRISC, ISO/IEC 27001 Lead Implementer or Lead Auditor, CompTIA Security+, GIAC certifications, or equivalent qualifications.
• Fluency in English is required. Professional working proficiency in German is highly desirable.

Benefits & Culture

• An open and friendly corporate culture characterized by constructive and collaborative interaction.
• Early risers and night owls - thanks to a flexible working model you can organise your working day yourself.
• We also support you privately - benefit from special payments or additional vacation days on anniversaries or other special occasions.
• Utimaco is growing and living diversity! Our global team includes colleagues from 42 nationalities and 45 different languages spoken.