CANCOM
Information Security Manager (m/w/x)
Vollzeitmit HomeofficeBerufserfahren
München, Berlin, Frankfurt am Main, Langenfeld (Rheinland), Leipzig, Stuttgart, Hannover, Aachen, Hamburg, Köln
Neuer Job?Nejo!
Dein persönlicher KI-Karriere-Agent
DODocuWare
Information Security Manager - Risk Management (m/w/x)
Vollzeitmit HomeofficeBerufserfahren
Nejo KI-Zusammenfassung
End-to-end information security risk management for SaaS provider, including third-party risk and C-level reporting. Several years of IT risk management experience required. Mobile work, flexible hours, globally distributed teams.
Deine Match-Analyse
von deinem Karriere-Agenten
Warum dieser Job zu dir passt
Mögliche Lücken
Tipps für deine Bewerbung
Anforderungen
- Completed degree in (business) informatics, business administration, information security, risk management, or comparable qualification
- Several years of professional experience in information security, IT risk management or GRC with hands-on responsibility for risk assessments, ideally with SaaS, cloud or software provider
- Independent running of risk assessments, including complex and novel cases, and enjoyment of moderating workshops with technical and business stakeholders
- Comfortable with numbers: scenario-based and quantitative risk analysis (e.g., FAIR), three-point estimates and cost-benefit considerations, ability to challenge estimates
- Solid understanding of cloud and SaaS architectures, ideally Microsoft Azure, for discussing attack paths and loss scenarios with engineers
- Certification such as CRISC, CISM, CISSP, ISO 27005 Risk Manager or Open FAIR, and experience with Jira, Confluence or GRC tooling is an advantage
- Analytical rigor, sound judgment, ability to challenge constructively, independent work, ownership of portfolio, clear and honest communication of risks up to C-Level
- Business fluent English, German is a plus
Aufgaben
- Manage information security risk management end-to-end
- Prepare quarterly risk reports for C-Level
- Manage the information security part of third-party risk management
- Support colleagues with the internal control framework
- Support colleagues with internal and external audits
- Triage reported concerns
- Moderate risk scenario framing with Risk Owners
- Lead estimation workshops with Cloud Operations, Engineering, Legal, Data Protection, Sales, and Customer Success
- Estimate frequencies and losses
- Rate confidence
- Calculate expected annual loss
- Run plausibility checks for consistency, comparability, and traceability
- Assess efficiency of treatments
- Prepare treatment and acceptance decisions
- Consolidate the risk portfolio quarterly
- Prepare C-Level reports with the CISO
- Evaluate suppliers across their entire lifecycle
- Link supplier findings to the risk portfolio
- Answer customer due diligence, RFP, and questionnaire requests on risk and supply chain security
- Develop the risk methodology further
- Train Risk Owners and Business Owners
- Shape a risk culture for reporting
Berufserfahrung
ca. 1 - 4 Jahre
Ausbildung
Bachelor-Abschluss
Sprachen
Englisch – verhandlungssicher
Deutsch – Grundkenntnisse
Tools & Technologien
Microsoft AzureJiraConfluence
Benefits
Flexibles Arbeiten
- Mobile Work
- Flexible working hours
- Flexible work location
Lockere Unternehmenskultur
- Globally distributed teams
Weiterbildungsangebote
- Regular training
Mehr Urlaubstage
- 35 vacation days
Gesundheits- & Fitnessangebote
- Sport offerings
Mentale Gesundheitsförderung
- Massages
Snacks & Getränke
- Free coffee and snacks
Gratis oder Vergünstigte Mahlzeiten
- Subsidized lunch
Betriebliche Altersvorsorge
- Company pension plan
Workation & Sabbatical
- 30 Days Work from Abroad
Kinderbetreuung
- Preferred daycare enrollment
Mentoring & Coaching
- Buddy Program
Von Nejo automatisch aufbereitet
Nejo hat diesen Job automatisch von der Website des Unternehmens DocuWare erfasst und die Informationen auf Nejo mit Hilfe von KI für dich aufbereitet. Trotz sorgfältiger Analyse können einzelne Informationen unvollständig oder ungenau sein. Bitte prüfe immer alle Angaben in der Originalanzeige! Inhalte und Urheberrechte der Originalanzeige liegen beim ausschreibenden Unternehmen.
Zur Originalanzeige bei DocuWareÜber das Unternehmen
DO
ITGermering
Das Unternehmen steht für papierloses Arbeiten und unterstützt ehrenamtliche Organisationen und lokale Sportvereine.
Wie gut ist dein Lebenslauf?
Nejo bewertet ihn, und bringt ihn danach gemeinsam mit dir in Bestform.
Du hast noch keinen Lebenslauf?
Noch nicht perfekt?
- PROLIANCE GmbHInformation Security Manager (m/w/x)Vollzeitmit HomeofficeBerufserfahrenMünchen
- DDSK GmbHInformation Security Manager (m/w/x)Vollzeitmit HomeofficeBerufserfahrenMünchen
- Deutsche Telekom MMS GmbHInformationssicherheitsberater (m/w/x)Vollzeitmit HomeofficeBerufserfahrenHamburg, Dresden, Berlin, Bonn, Jena, München, Rostock, Stuttgart, Leipzig, Mannheimab 55.000 - 75.000 / Jahr
- IDEALworks GmbHInformation Security Officer (m/w/x)Vollzeitmit HomeofficeBerufserfahrenMünchen