Jetzt als Information Security Professional (m/w/x) bei ZEISS Group in Oberkochen starten

ZEISS Group

Your Role:

The InfoSec Certifications and Governance team is responsible for developing, implementing, and maintaining the ZEISS Information Security Program within the ZEISS Information Security Organization. The ZEISS Information Security Program is aligned with well-known international frameworks and standards and considers requirements from all business functions across the ZEISS group as well as regulatory requirements.

Furthermore, the team’s responsibilities include Governance, Risk and Compliance Management, Information Security Audit Management, and ISMS operation.

As Information Security Professional, you will be responsible for further development and operation of the ZEISS Information Security Program in areas such as the ZEISS Information Security Management System Process, the ZEISS Policy Framework, Information Security in Supplier Relationships and Prototype Protection.

You will

support development and review information security policies, procedures, guidelines, forms and templates together with the related Subject Matter Experts.
support development of measures to ensure compliance with ISO 27001 as well as other applicable information security requirements and frameworks.
support execution of Information Security Risk Assessments and Analysis to make sure appropriate measures are taken in order to treat identified Information Security Risks appropriately.
further develop and implement Information Security Auditing across all ZEISS legal entities and locations together with the responsible Regional and Business Information Security Officers.
support communication of all matters relating to the ZEISS Information Security Program into all Businesses and Regions.
further develop the ZEISS GRC tool.
shape the Information Security posture of ZEISS globally and in a sustainable way with the ability to bring your ideas to life.
be part of a dynamic and motivated team with a passion for Information Security consisting of people of all different experience levels and personalities.

Your Profile:

Apprenticeship / professional education / studies in the field of Information Security (Bachelor's or Master's degree) or equivalent combination of education and working experience
Professional experience in a field related to IT- or Information Security, e. g. Information Security Management, ISO 27001, Information Security KPIs, Information Security Incident Management of advantage.
Be fluent in at least one programming language (e. g. Python)
Ability to work in a structured and independent way
A strong analytic personality, including the ability to solve complex tasks and problems by applying innovative thinking
Sharing your knowledge and know-how to advance the team and work field is in your nature
Hands-on mentality as well as a goal-oriented mindset
Fluent English or German language skills
French, Spanish or other languages are of advantage