Required skills
- Information Security
- Risk Management
- Software Development
- Software Procurement
- Web Applications
- Desktop Applications
- APIs
- Databases
- Network Architecture
- ISO 27001
- BSI IT-Grundschutz
- NIST CSF
Languages: German
Job description
Seeking an ICT Security Operations Manager to advise application owners on information security and data protection, ensuring defined security levels, and managing security documentation and tickets.
Project overview
ICT Security Operations Manager
Reference: cab23705-a9e1-4581-bf6f-fbc9daacc93e
- No sub-contracting possible, only staff leasing via Hays (Switzerland)
Responsibilities
- Advising and supporting application owners in creating protection needs analyses and ISDS concepts in the area of information security and data protection
- Advising application owners on achieving and maintaining a defined information security level
- Formal and content review and assessment of ISDS concepts
- Checking compliance with and implementation of policies, guidelines, and security requirements
- Following up on and demanding measures from vulnerability analyses, pentests, and audits
- Ensuring structured, traceable, and central storage of relevant security documentation
- Reviewing and demanding appropriate information security clauses in contracts and collaborating with external suppliers
- Reviewing authorizations and accesses and sensitizing responsible persons regarding security-relevant requirements
- Creating and maintaining security cockpits and status overviews, for example, on ISDS documentation, training, contracts, and security vulnerabilities
- Independently processing and following up on security-relevant tickets and pending issues, as well as coordinating open measures with the involved stakeholders
Requirements
- Completed Master's degree in Engineering, Computer Science, or a comparable technically oriented field
- Professional experience in information security and risk management
- Practical experience in software development, software procurement, or a comparable IT-related activity
- Sound knowledge of modern web and desktop applications, APIs, and databases, as well as basic network architectures
- Very good technical and organizational understanding of information security and security processes
- Knowledge of relevant security standards and frameworks such as ISO 27001, BSI IT-Grundschutz, NIST CSF, or ICT minimum standards
- Good knowledge of authentication and authorization, e.g., SSO, OpenID Connect, MFA, and RBAC
- Knowledge of security topics such as Cloud/SaaS, Backup & Recovery, Audit Logging, DevSecOps, Containers, Virtualization, or Operating Systems
- Experience with audits, GRC tools, Business Continuity Management, or cryptographic methods is an advantage
- Strong communication and consulting skills, as well as a structured, independent, and quality-oriented way of working
Project details
01/27
12 MM++
- Start: 01/27
- Duration: 12 Monate
- Remote: onsite
- Location: Aarau, Schweiz, CH
- Languages: German
Source notes
The IT division is our core competence, on which Hays has developed. We are the largest privately organized IT personnel service company in Germany and have the right offer for every career level – whether you are interested in vacancies in agile SMEs or large DAX corporations. We master the entire IT spectrum from support to software architecture or digitalization – thanks to our extensive portfolio, there is something for everyone. In recent decades, we have supported countless IT specialists and managers in setting the course for a successful career as part of a lifelong partnership.
Our consulting team is specialized and thus able to respond to your wishes and ideas and to prepare you optimally for job interviews and contract negotiations. Try it out and find out what the market has to offer you – completely free, discreet, and non-binding! We look forward to hearing from you.
My contact at Hays:
Reference number:
*
Contact:
Email: *@*.ch
Phones: *
- Responsible and varied activity in a technically exciting environment
- Access to state-of-the-art technologies and tools
- Remote possibility
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on FreelancerMap CH