IT Security Manager

Stack

Responsibilities

• ▹Handle security incidents with reporting
• ▹Support the implementation, commissioning and maintenance of IT security solutions
• ▹Structured, cost- and performance-conscious selection of products and service providers
• ▹Steer external service providers within service and escalation management
• ▹Assess savings and optimization opportunities in your area of responsibility
• ▹Involve third-party vendors in problem analysis, including escalation management
• ▹Create, continue and update documentation, guides and operating manuals across sites
• ▹Take service ownership for services in the area: analysis, monitoring and assessment of security-relevant incidents and threats
• ▹Design, implement, optimize and document the IT security incident response process
• ▹Develop, implement and improve IT security concepts
• ▹Create reports and evaluations on security-relevant events
• ▹Detect attacks on the entire infrastructure and support the development of a security dashboard for continuous situational awareness
• ▹Create and update IT-security-relevant documentation
• ▹Onboard new sites into the group-wide security structure

Requirements

• ▹Completed degree in computer science or a comparable vocational qualification in IT
• ▹Several years of experience (at least 5) in IT security or a similar position
• ▹Experience with SIEM and incident response solutions and processes
• ▹Expertise in using security monitoring tools (such as PRTG, Crowdstrike or Wireshark)
• ▹Experience in vulnerability management
• ▹Knowledge of IT security systems and understanding of network and operating system architectures
• ▹Experience with firewalls and network devices
• ▹Knowledge of operating and securing DMZ services
• ▹Very good knowledge of cloud solutions (Microsoft Azure preferred)
• ▹Strong communication skills in German and English

Nice to have

• ▹Vendor-specific knowledge: Fortinet, HP Aruba, Extreme Networks
• ▹Specialized IT security knowledge, for example experience in security incident management
• ▹Knowledge of the NIS2 directive, ISO 27001 and BSI IT-Grundschutz
• ▹Experience with endpoint detection and response (EDR/XDR) solutions
• ▹Knowledge of zero trust architecture and identity and access management (IAM/PAM)
• ▹Scripting skills to automate security tasks (e.g. PowerShell, Python)
• ▹Experience with threat intelligence platforms and threat analysis (MITRE ATT&CK)

Soft skills

What we offer

• ▹Work-life balance through flexible working with flextime accounts
• ▹30 days of vacation
• ▹Collectively agreed annual special payment and holiday pay
• ▹Capital-forming benefits and company pension scheme
• ▹Free employee parking
• ▹JobRad
• ▹Employee offers (Corporate Benefits)
• ▹Company events
• ▹Professional training
• ▹International family company
• ▹Independent, self-directed work

About the company

The AUNDE Group (brands AUNDE, ISRINGHAUSEN, FEHRER and REINERT) develops and manufactures interior products for the automotive industry and other forms of mobility; with more than 110 production sites in 29 countries it is among the world's 100 largest automotive suppliers and operates as a family company.