Cyber Security Management Expert

Project overview

For our client, a mid-sized retail company with increasing information security requirements, we are looking for an expert (m/f/d) to build and lead the Cyber Security team. The engagement starts with a ten-day assessment, followed by approximately 3 to 6 months of leading the Cyber Security team.

Responsibilities

Assessment

Leadership Cyber Security Team

Skills

• Inventory of the existing security organization, roles, policies, processes, and tools
• Maturity assessment, particularly of risk, vulnerability, identity and access management, incident response, and emergency and recovery planning
• Analysis of regulatory and contractual requirements (e.g., NIS2, ISO 27001, BSI IT-Grundschutz) and the protection needs of critical systems
• Derivation of fields of action and a prioritized roadmap, coordination with management
• Professional and organizational leadership of the Cyber Security team
• Implementation of prioritized measures from the assessment
• Establishment and implementation of an Information Security Management System (ISMS) according to recognized standards
• Definition of security policies, roles, responsibilities, and escalation paths
• Development or further development of security monitoring and incident response, including reporting channels and crisis communication
• Introduction or optimization of security tooling (e.g., SIEM, Endpoint Protection, Vulnerability Management) and reporting metrics
• Establishment of security awareness and training measures for employees
• Coordination with business units, IT, data protection, and external service providers
• Structured handover to permanent leadership, including knowledge transfer
• Several years of experience in building or leading Cyber Security or Information Security
• Sound knowledge of common standards and frameworks (e.g., ISO 27001, BSI IT-Grundschutz, NIST), ideally with certification (e.g., CISM, CISSP or ISO 27001 Lead Auditor)
• Experience with regulatory requirements such as NIS2 and their practical implementation
• Practical experience with security tools and security architectures
• Experience in leading teams
• Very good communication and moderation skills, also towards management and business units
• Advantageous: Experience in managing external security service providers, knowledge in the retail or logistics sector

Project details

• Start: ab sofort
• Duration: 6 Monate
• Remote: hybrid
• Location: Hof, Deutschland, DE
• Languages: German