IT Risk & Security (Senior) Manager (m/w/d)

<p><span><span>IT Risk &amp; Security (Senior) Manager (m/w/d)</span></span></p> <p><strong> </strong></p> <p></p> <p> </p> <p><span><span>If you like change, change to us </span></span></p> <p> </p> <p>We are an international mid sized group with appetite for innovations, approachable management, lead by objectives / targets which give the opportunity of a wide range of empowerment. We as a growth oriented market leader invite you to join us on our journey from good to great!</p> <p> </p> <p><span><span><span><em>The IT Risk &amp; Security (Senior) Manager translates the IT-risk requirements and constraints of the business into technical control requirements and specifications, as well as develops metrics for ongoing performance measurement and reporting. The IT Risk &amp; Security (Senior) Manager coordinates the IT-organization's technical activities to implement and manage security infrastructure, and to provide regular status and service-level reports to management</em>. </span></span></span></p> <p> </p> <p><span><span><span>The IT Risk &amp; Security (Senior) Manager is a leadership role that reports directly to the CIO and requires an individual with a strong technical background, as well as an ability to work with the IT-organization and business management to align priorities and plans with key business objectives. </span></span></span></p> <p> </p> <p><span><span><span><b>Responsibilities</b></span></span></span></p> <p><span><span><span>The IT Risk &amp; Security (Senior) Manager’s job is composed of a variety of activities, including tactical, operational, and strategic activities, such as:</span></span></span></p> <ul> <li><span><span><span>IT-Security governance.</span></span></span></li> <li><span><span><span>IT-Risk &amp; Audit Management.</span></span></span></li> <li><span><span><span>IT-Security Awareness Measures.</span></span></span></li> <li><span><span><span>Conduct external penetration Test.</span></span></span></li> <li><span><span><span>Lead strategic security projects.</span></span></span></li> <li><span><span><span>Steering &amp; escalations of security operations, i.e. incident management.</span></span></span></li> <li><span><span><span>Continuous exchange with compliance organization, i.e. in Data Protection (GDPR) related matters.</span></span></span></li> <li><span><span><span>Evolve OT-Security measures &amp; governance.</span></span></span></li> <li><span><span><span>Develop (IT-) Business Continuity Management measures.</span></span></span></li> </ul> <p> </p> <p><span><span><span><b>Requirements</b></span></span></span></p> <ul> <li><span><span><span>A minimum of seven years of IT experience, with five years in an information security role and at least two years in a supervisory capacity.</span></span></span></li> <li><span><span><span>A bachelor's degree in information systems or equivalent work experience; an M.B.A. or M.S. in information security is preferred.</span></span></span></li> <li><span><span><span>Strong Leadership skills and the ability to work effectively with business managers, IT engineering and IT operations staff.</span></span></span></li> <li><span><span><span>The ability to interact with Norma Group personnel, build strong relationships at all levels and across all business units and organizations, and understand business imperatives.</span></span></span></li> <li><span><span><span>A strong understanding of the business impact of security tools, technologies, and policies.</span></span></span></li> <li><span><span><span>Strong leadership abilities, with the capability to develop and guide information security team members and IT operations personnel, and work with minimal supervision.</span></span></span></li> <li><span><span><span>Excellent verbal, written and interpersonal communication skills, including the ability to communicate effectively with the IT-Organization, project and application development teams, management, and business personnel; in-depth knowledge and understanding of information risk concepts and principles as a means of relating business needs to security controls; an excellent understanding of information security concepts, protocols, industry best practices and strategies.</span></span></span></li> <li><span><span><span>Experience working with legal, audit and compliance staff.</span></span></span></li> <li><span><span><span>Experience developing and maintaining policies, procedures, standards, and guidelines.</span></span></span></li> <li><span><span><span>Experience with OT-Security methods is preferred.</span></span></span></li> <li><span><span><span>Experience with common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL), TISAX and Control Objectives for Information and Related Technology (COBIT) frameworks.</span></span></span></li> </ul> <p> </p> <p> </p> <p><span><span>Contact for this position: <span>Monika Mohr</span></span> </span