IT Security & Compliance Program Lead (m/f/d)

E.ON Drive Infrastructure GmbH; Essen; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Hybrid working

Competitive salary with bonus

€5,000 training budget per year

Company pension scheme

Onboarding with hardware

Zusammenfassung

E.ON Drive Infrastructure GmbH in Germany seeks a senior Information Security Governance professional to lead IT security and compliance across multiple markets. You will own risk registers, track regulatory requirements, and report to management with quarterly updates.

Fluent English is required; German is a strong advantage. Hands-on work with NIS2, ISO 27001 and audits across several countries is essential. Hybrid work and travel to markets are expected.

Qualifikationen

• 5-8 years in information security governance, risk and compliance across multiple entities/countries.
• IT operations, security operations or IT audit background to understand failure modes and control bypass.
• Experience assessing suppliers with SOC 2 or ISO 27001 evidence; follow-up on exceptions and verify vendor responses.
• Ability to decide, with incomplete information, whether an incident is reportable and to whom.
• Led end-to-end compliance programs with milestones, status reports and executive sign-off.
• Ability to explain obligations to managing directors succinctly, outlining costs and requirements without jargon.
• Hands-on experience implementing NIS2, KRITIS or comparable regulation across several countries.
• Certifications: CISM/CISA welcome; ISO 27001 Lead Implementer or Lead Auditor; BSI IT-Grundschutz Practitioner.

Aufgaben

• Run IT security governance and compliance program across markets with country milestones.
• Track cybersecurity regulation and maintain authority registrations.
• Provide country managing directors with clear, regular status views.
• Maintain the risk register and report to management quarterly.
• Assess suppliers’ security terms with procurement and review contracts.
• Own incident reporting as escalation contact for the SOC.
• Own security policies and test key controls.
• Organize security training for management and awareness of all employees.
• Provide security evidence for tenders and audits.
• Scope and steer external specialists for penetration tests and technical work.
• Act as IT contact for business continuity and crisis management.

Kenntnisse

InfoSec governance

Risk management

Regulatory compliance

Incident decision-making

Audits & controls

Ausbildung

ISO 27001 Lead Implementer

CISM or CISA

BSI IT-Grundschutz Practitioner

Bachelor's degree in IT/CS

Tools

ISO 27001 lead implementer

ISO 27001 lead auditor

BSI IT-Grundschutz

SOC 2 evidence handling

Jobbeschreibung

Your mission

• Run IT security and compliance as one program across all markets, with milestones per country
• Track the cybersecurity regulation in each market and keep authority registrations current
• Give every country managing director a clear, regular view of where they stand
• Maintain the risk register and report to management quarterly
• Assess our critical suppliers together with procurement and assess the security terms in their contracts
• Own incident reporting as the escalation contact for our managed SOC
• Own the security policies and test that key controls work
• Organize security training for management and awareness for all employees
• Provide the security evidence for tenders and audits
• Scope and steer external specialists for penetration tests and technical work
• Act as IT contact for business continuity and crisis management

This is a senior individual contributor role within our central IT team, offering significant ownership and accountability without direct people management responsibilities.

You will collaborate closely with Legal, Data Protection, Procurement, Product Owners, and business leaders across our country organizations. Security Operations, Workplace IT, and Data Protection are managed by dedicated specialist teams and partners.

Your profile

• Five to eight years in information security governance, risk and compliance, ideally in a group with several legal entities or countries
• Your career started in IT operations, infrastructure, security operations or IT audit, so you know how systems fail and how controls are bypassed in practice
• You have assessed suppliers beyond the questionnaire: worked through SOC 2 or ISO 27001 evidence, followed up exceptions and judged whether a vendor's answer holds up
• You can decide within hours, with incomplete information, whether an incident is reportable and to whom
• You have run a compliance program end to end: plan, milestones, status reporting and closure, with senior stakeholders who were not security experts
• You build trust with managing directors. You explain what an obligation means for them, what it costs and what you need, in a few minutes and without jargon
• Hands-on experience implementing NIS2, KRITIS or comparable cybersecurity regulation, ideally across several countries
• ISO 27001 Lead Implementer or Lead Auditor, or BSI IT-Grundschutz Practitioner. CISM or CISA is welcome
• Fluent English. German is a strong advantage for working with the BSI
• Based in Germany, ideally within reach of Essen, with occasional travel to our markets
• A plus: experience in energy, OT or IoT environments, or with business continuity

Why us?

• People take centre stage: Become part of a dynamic, ambitious and agile team that develops solutions for the eMobility market and be part of our EDRI events or the next after-work event
• With us, you get the best of both worlds - 100% start-up with the support of a large company
• The freedom you need: We offer you hybrid working with flexible working hours
• Workation: Enjoy the flexibility to work temporarily from abroad – within the EU
• You will receive a competitive salary with a performance-related bonus
• A company pension scheme is of course also one of the benefits with us
• Sustainable learning opportunities: We support you with a training budget of 5,000 euros per year
• You get everything you need to get started: onboarding with welcome gifts and all the hardware you need

Contact

Diversity counts at E.ON. We welcome all people and are convinced that differences make us stronger. Become part of our inclusive and diverse corporate culture!

Seize the opportunity to become part of our E.ON Drive Infrastructure team and not only create prospects for the future of E.ON, but also for your own.

We look forward to getting to know you!

Laura
Junior Recruiter