Information Security Program Manager (m/f/d)

We are looking for an Information Security Program Manager (m/f/d)

(unlimited, full-time) Join our team in Berlin, Münster, Amsterdam, Heerenveen, Luxembourg or Verl - flexible working conditions available.

We are seeking an Information Security Program Manager to join our CISO team at our regulated institute subject to DORA. This role will coordinate consulting and assurance teams, advising internal stakeholders on resilience domains such as information security, business continuity, IT governance, second line audits, and ICT third-party management.

Key Responsibilities:

1. Project & Program Management: Plan, manage, and execute large-scale resilience programs across the organization. Track activities, budgets, issues, and escalations, and conduct risk assessments and reporting for timely project execution.
2. Stakeholder Engagement: Collaborate with senior management, project teams, and external partners to assign responsibilities and meet quality objectives.
3. Process Governance: Manage the process map for the CISO team, overseeing over 100 processes to ensure quality standards. Provide internal reports on activities, including consulting, assurance, and overarching functions.
4. Awareness & Outreach: Create and implement awareness campaigns to promote security practices and foster a culture of resilience. Use effective communication to keep all employees informed and engaged.
5. Audit Program Management: Coordinate internal and external audit activities, including risk-based second line audits and ICT third-party assessments. Manage stakeholder relations and aim to automate these processes over time.

Qualifications:

• Bachelor's degree in Business Administration, Computer Science, or related field; advanced degrees or certifications like PMP or CISM are a plus.
• At least 2 years of project or program management experience, especially in large-scale security projects, with strong organizational skills.
• Experience in information security, business continuity, and IT governance. Familiarity with financial regulations such as DORA is highly desirable.
• Excellent communication skills in English and preferably German, capable of explaining complex security topics to non-technical audiences.
• Strong analytical and problem-solving abilities, with a proven track record in project management issues and response strategies.

Date: Apr 12, 2025

Location: [Specify location]