Manager Cyber Security & Regulatory Compliance (m/w/d)

Rail Power Systems GmbH; München; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

Ein führendes Unternehmen im Bereich Eisenbahninfrastruktur in München sucht einen Manager Cyber Security & Regulatory Compliance (m/w/d). In dieser Rolle sind Sie verantwortlich für den Aufbau und die Pflege eines Informationssicherheitsmanagementsystems (ISMS) nach ISO 27001 und analysieren Anforderungen aus Richtlinien wie dem Cyber Resilience Act. Sie arbeiten eng mit verschiedenen Fachbereichen zusammen, um Sicherheitskonzepte zu entwickeln und zu implementieren. Ein relevanter Abschluss sowie tiefes Wissen über Cyber-Sicherheitsrichtlinien sind erforderlich. Das Unternehmen bietet ein flexibles Arbeitsumfeld mit 30 Tagen Urlaub und Entwicklungsmöglichkeiten.

Leistungen

30 Tage Urlaub

Flexible Arbeitszeiten

Rundum Betreuung und Einarbeitung

Individuelle Entwicklungsmöglichkeiten

Monatlicher Netto-Zuschuss von 50 €

Fahrradleasing

Kostenlose Parkplätze

Gemeinschaftsevents

Qualifikationen

• Relevante Ausbildung oder berufliche Qualifikation mit umfangreicher IT-Erfahrung.
• Tiefes Wissen über Cyber Resilience Act, Produkthaftung und IT-Sicherheitsgesetze.
• Technisches Verständnis für IT-Infrastrukturen und Produktionssysteme.

Aufgaben

• Aufbauen und Pflegen eines Informationssicherheitsmanagementsystems (ISMS).
• Anforderungen aus dem Cyber Resilience Act analysieren und Maßnahmen ableiten.
• Entwickeln und Pflegen eines Compliance-Registers für sicherheitsrelevante Anforderungen.

Kenntnisse

Kenntnisse in Cyber Resilience Act

Erfahrung im Projektmanagement

IT-Infrastrukturen und Produktionstechniken

Sehr gute Kommunikationsfähigkeiten

Service- und Beratungsorientierung

Deutsch und Englisch fließend

Ausbildung

Relevanter Abschluss (IT, Wirtschaftsingenieurwesen)

Jobbeschreibung

Manager Cyber Security & Regulatory Compliance (m/w/d)

Join to apply for the Manager Cyber Security & Regulatory Compliance (m/w/d) role at Rail Power Systems GmbH.

Welcome to Rail Power Systems, one of the leading technology companies in the field of railway infrastructure and power supply. From trams in local traffic to high‑speed trains in long‑distance traffic, we ensure that overhead lines are always powered, ensuring tomorrow’s mobility today. With enthusiasm and know‑how we develop and deliver bespoke overhead line systems that meet local conditions and the highest customer expectations. As a solid, internationally operating mid‑market company with over a century in the market, we stand for future‑looking and environmentally friendly solutions, guaranteeing a reliable power supply for railway traffic.

To support our team we are looking for a Manager Cyber Security & Regulatory Compliance (m/w/d) at our Munich location. You will help trains get on the right track by working on exciting, ecologically sustainable railway infrastructure projects.

Responsibilities

• Build, introduce, and maintain an Information Security Management System (ISMS) according to ISO 27001; support the creation or integration of an OT Security Management based on IEC 62443.
• Analyze requirements from the Cyber Resilience Act (CRA), new product liability guidelines, NIS‑2 directive, AI Act, IT Security Act 2.0 and derive concrete technical and organizational measures, processes, and documentation.
• Develop and maintain a compliance register for security‑relevant requirements, including audit preparation, support, and follow‑up.
• Work closely with the IT department and operational OT areas to define and improve network security concepts (segmentation, zones, firewalls).
• Define Identity & Access Management processes.
• Assist in protecting production‑close systems (SPS, SCADA, MES, etc.) from cyber attacks, considering special requirements.
• Coordinate with development, product management, and quality to implement requirements stemming from CRA & product liability guidelines.
• Contribute to security concepts for connected products.
• Conduct and facilitate risk analyses for IT and OT systems, as well as products and AI systems.
• Develop and advance a Security Incident Management process, ensuring compliance with mandatory reporting obligations (e.g., NIS‑2/IT Security Act).
• Design and implement awareness measures and training for employees (IT, OT, development, management).
• Consult functional areas on projects, procurements, and product development regarding security & compliance.

Qualifications

• Relevant degree (IT, industrial engineering, etc.) or vocational training with extensive IT experience.
• Deep knowledge of Cyber Resilience Act, product liability law, IT Security Act 2.0 (especially KRITIS), AI Act.
• Technical understanding of IT infrastructures and production‑close systems (SPS, SCADA, MES, Industry 4.0).
• Experience establishing or enhancing management systems (e.g., ISMS) and cross‑functional project management.
• Strong service and consulting orientation, hands‑on mentality.
• Excellent communication, results orientation, and sense of responsibility.
• Independent, structured, and solution‑oriented working style.
• Very good German and English language skills.
• Willingness to travel.

Benefits

• 30 days of vacation.
• Flexible working hours and the possibility to work 12 days per month remotely.
• Comprehensive onboarding into a varied task area with ample freedom in a future‑oriented sector.
• Supportive work climate with helpful colleagues who live teamwork and solidarity.
• Individual development opportunities and specialized training to support your growth.
• State‑pension‐contributing benefits (AVWL) of €319.08 per year.
• Monthly net benefit of €50 (voucher model).
• Corporate benefits with attractive employee offers.
• Bicycle leasing through Deutsche Dienstrad.
• Good transportation links – our site is within walking distance from Heimaranplatz.
• Free parking in our underground garage.
• Community events, e.g., company runs, summer festivals, Christmas parties, and beyond.

For questions about the position, please contact Florian Wurzer at [e-mail].

Rail Power Systems GmbH | Garmischer Straße 35 | 81373 München | www.rail-ps.com