Principial Security Expert (German at least B2)

Universal-Investment; Frankfurt; Hybrid; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Food vouchers

Free job ticket

Home office possibility

Zusammenfassung

A prominent fund services platform in Frankfurt is seeking an experienced cybersecurity leader to oversee SOC activities, coordinate vulnerability management, and support compliance with financial regulations. The ideal candidate will have at least 10 years of cybersecurity experience, with significant expertise in SOC operations, a strong understanding of Zero Trust principles, and proficiency in both English and German. This role offers an exciting work environment with the possibility of home office and flexibility in working hours.

Qualifikationen

• Minimum 10 years of comprehensive cybersecurity experience.
• At least 5 years in senior security leadership positions.
• Extensive experience leading Security Operations Center (SOC) operations.

Aufgaben

• Oversee Security Operations Center (SOC) activities and incident response procedures.
• Maintain and optimize our EDR (Endpoint Detection and Response) solution.
• Coordinate vulnerability management programs and remediation efforts.

Kenntnisse

Cybersecurity expertise

SOC operations leadership

DevSecOps methodologies

Compliance with regulations

Penetration testing

XDR systems proficiency

Fluency in English

Fluency in German

Ausbildung

CISSP or CISM certification

OSCP preferred

CompTIA CySA+

Tools

SIEM platforms

IAM solutions

Cloud security governance tools

Jobbeschreibung

Grow with us! Universal Investment is on its way to becoming Europe's leading fund services platform and Super ManCo. We have provided innovative fund solutions for asset managers and institutional investors since 1968. We are also well established in Germany, Luxembourg, Ireland and Poland. From here and from our offices in Frankfurt, Krakow, Luxembourg, Dublin, Paris and Stockholm, we continue to expand internationally. We are currently looking for entrepreneurial people who want to grow and share in the profits of our success.

Your tasks and responsibilities:

• Oversee Security Operations Center (SOC) activities and incident response procedures
• Support maintaining a SIEM (Security Information and Event Management) systems
• Coordinate vulnerability management programs and remediation efforts
• Maintain and optimize our EDR (Endpoint Detection and Response) solution
• Provide security consulting to internal stakeholders and business units
• Contribute to implementing Zero Trust Architecture principles across the organization
• Facilitate DevSecOps practices and ensure OWASP compliance in development processes
• Maintain Identity and Access Management (IAM) frameworks and policies
• Participate in penetration testing activities and security assessments
• Contribute to developing cloud governance frameworks and maintain secure cloud landing zone architectures
• Support compliance efforts with regulatory standards including DORA, BaFin, and CSSF requirements
• Collaborate with the CISO team to implement and maintain security frameworks based on ISO 27001, NIST, and CIS Benchmarks
• Facilitate security awareness training programs and delivery
• Collaborate with cross-functional teams to integrate security into business processes

Your skills and experience:

• Minimum 10 years of comprehensive cybersecurity experience
• At least 5 years in senior security leadership positions
• Extensive experience leading Security Operations Center (SOC) operations
• Advanced proficiency with XDR systems
• Expert-level knowledge of SIEM platforms
• Deep understanding of Zero Trust Architecture implementation
• Strong background in DevSecOps methodologies and OWASP standards
• Comprehensive experience with Identity and Access Management (IAM) solutions
• Hands-on penetration testing and security assessment experience
• Proven security consulting experience with diverse stakeholders
• Knowledge of cloud security governance and DevOps practices and Scrum methodologies
• Thorough understanding of ISO 27001, NIST Framework, and CIS Benchmarks
• Experience with financial sector regulations: DORA, BaFin, and CSSF compliance
• Fluency in English and German

Certifications Required:

• CISSP (Certified Information Systems Security Professional) or CISM (Certified Information Security Manager)
• OSCP (Offensive Security Certified Professional) preferred
• CompTIA CySA+
• Microsoft security certifications (AZ-500, SC-100, AZ-400)
• Network security certifications

What we offer:

• An exciting working environment and challenging tasks
• Extensive insight into the European fund industry
• Friendly, international and goal-oriented working environment
• High degree of independent work
• Food vouchers and other attractive discounts
• Free job ticket
• Home office possibility and time flexibility