IT Security Expert (m/f/d) Optimization of processes

Start: 01.08.2024

End: 31.12.2025

Location: Bonn

Job description:
The employee is assigned to the Quality and Risk Management department. The department ensures compliance (legal/contractual) for information security, confidentiality and data protection. They take on the necessary roles to ensure the implementation of the framework conditions and specifications. For quality, risk and project management, it represents the interests of the organizational unit.

• Central point of contact for the areas of quality and risk management
• Central point of contact for employees in the SSD for questions and uncertainties in the context of ISO9001, ISO31000, audits, tools and process issues
• Preparation and support of the protagonists of ISO9001 audits and security audits
• Implementation and moderation of lesson learned events
• Tracking audit findings and system deviations
• Documentation of business and information security risks
• Preparation of reports and the associated QM and RM key figures for management
• Monitoring data quality in the respective tools and tracking key figures
• Conducting and moderating regular meetings and risk workshops
• Preparation of risk reports for the client.
  

Qualification requirements:

1. Language skills: German: Level C1 and English Level B1 - Common European Framework of Reference for Languages CEFR

2. Training or studies related to IT: vocational/study degree (CV and certificate)

3. Training as a quality management representative: Quality management representative DIN EN ISO 9001 (certificate or comparable proof)

4. Basic training in IT risk management: IT risk manager according to ISO 31000 / ISO 27005 / BSI IT basic protection (certificate or comparable proof)

5. Basic certification ITIL 4 Foundation (certificate or comparable proof)

Experience requirements:
1. Experience of the applicable standards and regulations in the areas of quality and risk management (at least 5 years)
2. Experience in the area of management and processes in the ISO 9001, ISO 27000, ISO31000, ITIL and BSI IT-Grundschutz environment. (at least 5 years)
3. Experience with internal and external audits in the context of ISO9001 certification and with the preparation of audit defense workshops (at least 5 years)

4. Experience with the certification of integrated management systems (at least 5 years)
5. Experience with common MS Office applications (Word, Excel, PowerPoint, Outlook etc.) (at least 5 years)