Information Security Manager (m/w/d)

Responsibilities

• ▹Build and continuously develop the information security management system (ISMS) according to ISO 27001, from policy creation to effectiveness evaluation
• ▹Identify and assess risks as well as new projects and technologies (software, SaaS and AI solutions) from an information security perspective, analyze vulnerabilities, derive concrete measures and monitor their implementation
• ▹Plan and accompany security audits and penetration tests, handle security incidents, and prepare emergency and crisis-team exercises
• ▹Actively engage with IT and development teams, supporting the secure design of systems, networks and cloud environments
• ▹Provide recommendations across the organization, up to management and executive level
• ▹Develop and manage awareness measures to strengthen security awareness within the company

Requirements

• ▹A completed degree in (business) informatics, IT security or a comparable qualification
• ▹Practical experience building or operating an ISMS according to ISO 27001
• ▹Experience in risk analysis, audit preparation and security assessments, ideally including AI security aspects
• ▹Solid technical understanding of IT security, cloud, network and modern IT infrastructure, with the ability to independently assess technical findings and translate them into pragmatic measures
• ▹Familiarity with regulatory requirements such as BSI baseline protection, NIS2, CRA and the EU AI Act
• ▹Strong communication and advisory skills, able to convey complex matters clearly up to management level
• ▹A proactive, self-driven way of working: independently identifying risks, vulnerabilities and improvement potential and ensuring appropriate measures are implemented

What we offer

• ▹Varied tasks with plenty of creative freedom and responsibility
• ▹An open and appreciative work atmosphere with collaboration on equal footing
• ▹13.8 monthly salaries and at least 30 vacation days, plus 7 additional days off, at a 38.5-hour work week
• ▹Primarily based at the modern Hamburg office, close to the Alster, with an in-house canteen
• ▹Mobile working available by arrangement

About the company

dpa-IT Services GmbH is the IT backbone of the Deutsche Presse-Agentur (dpa), one of the world's leading independent news agencies; as a dpa subsidiary it is responsible for IT infrastructure, business-critical applications, modern cloud and data-center infrastructure, and digital workplaces for the entire dpa group.