VP Cyber Security IT/OT

The VP Cyber Security IT/OT is the responsible role for the secure operation of all IT Services and IT Processes within IT in the areas of endpoint security, application security, network security and cloud security. He works closely with the CDIO and the CISO and recommends and implements security measures in IT and OT solutions to safeguard/ensure compliance to Directives. dormakaba intends to integrate the security design operations of IT technology outside of IT where possible and meaningful. For this document, “IT” also refers to IT technology if it is being used in the OT organization.

The VP Cyber Security IT/OT establishes IT security guidelines and other documents together with the CDIO and the CISO.

He provides leadership to the enterprise's IT security organization and is the controller and navigator of the IT security organization of dormakaba.

 

A job that matters: your tasks

IS Risk Management

• Evaluates new technology, critical security gaps and vulnerabilities regarding their relevance to dormakaba (technical IT focus)
• Escalates risks relevant for the whole ISMS to the CISO
• Coordinates security risks and their rating with the CISO (focus IT/technical issues)
• Assures an adequate register of all IT/technical assets of dormakaba
• Initiates IT security measures and reviews/evaluates reports on their implementation within the IT of dormakaba
• Supports dormakaba IT when applying for security exceptions (e.g. by suggesting compensating security measures)
• Reports IT IS risks to the corporate risk management

IS Management

• Operates the process of continuous improvement of the IT related security measures
• Transfers the IS governance Directives into technical information security related Directives and other documents based on more generic information security Directives in close collaboration with the CISO
• Ensures the exchange with other company roles and activities (e.g. development, BCM, IT, physical security)
• Supports the CDIO and the CISO with adequate IT security know how
• Represents dormakaba externally in questions of IT/technical security (e.g. customers, authorities, special interest groups)
• Accountable for tracking the timely implementation of decided risk mitigating activities
• Responsible for IT security exceptions

IS Incident Management

•  Supports the security incident management process, takes the lead in treating critical IT security related incidents

•  Escalates breaches of security Directives and requirements to initiate sanctions and corrective action to the CISO

•  Supports the "lessons learned" process within the IS incident management

Internal IS Consulting

•  Serves as point of contact for all IT security issues (technical focus)

•  Assures the inclusion of IT security in projects, especially within the IT (e.g. by defining security requirements)

•  Advises the dormakaba IT regarding the selection, design and implementation of measures under IT security aspects

IS Programs

•  Oversees the execution of the strategic security programs and is accountable for the successful execution in time and in quality

 

An experience that matters: your skills

• Master degree in computer science or comparable education, further education/experience in IT Security, several year of experience in Leadership and ISM

• Strong leadership skills and the ability to work effectively with business managers, for example CDIO, CIO, CFO, CEO, Chief Legal.

• The ability to interact with dormakaba personnel, build strong relationships at all levels and across all business units and organizations, and understand business imperatives.

• A strong understanding of the business impact of security tools, technologies and policies.

• Excellent verbal, written and interpersonal communication skills, including the ability to communicate effectively with the IT organization, project and application development teams, management and business personnel; in-depth knowledge and understanding of IT risk concepts and principles as a means of relating business needs to security controls; an excellent understanding of IT security concepts, protocols, industry best practices and strategies.

• Experience developing and maintaining policies, procedures, standards and guidelines.

• Knowledge of common information security management frameworks, such as International Standards Organization (ISO) 2700x, the IT Infrastructure Library (ITIL) and Control Objectives for Information and Related Technology (COBIT)

Frameworks

•  Strong project management skills and experience in creating and managing project plans, including budgeting and resource allocation

 

A workpla