(Senior) Consultant Information Security Management / ISMS (m/f/d)

We are the IT security team at Fresenius Digital Technology. What are we about? We are responsible for implementing, managing and operating IT security for a variety of services in a variety of environments within the Fresenius Group. We also take care of information security management within the Fresenius Group functions, ensuring effective implementation of our security policies and procedures. We define the IT security architecture and implement numerous measures for the Group worldwide.

Would you like to join us in establishing a cyber culture with reliable control mechanisms in which security risks are reliably checked, evaluated and secured? Then join us in strengthening Group-wide awareness of cybersecurity!

Your tasks

• Dedicate yourself to the protection of highly sensitive data in the life sciences environment and make a valuable contribution to the implementation, maintenance and further development of our integrated information security management system (ISMS) in accordance with ISO/IEC 27001.

• You will be committed to the creation, implementation and further improvement of the rules and regulations, such as ISMS guidelines, processes and procedures.

• You will reliably create presentations and reports that provide information on information security management activities. You will also develop metrics and KPIs to measure the effectiveness of the ISMS.

• You will support IT security projects and accompany audits in the area of information security (ISO/IEC 27001, HDS & KRITIS).

• Last but not least, you will be involved in the development and implementation of security training and awareness programs and the corresponding campaigns.

Your profile

• Completed studies or alternatively an apprenticeship with relevant professional experience and further training

• Experience in the implementation and operation of information security management systems in accordance with ISO/IEC 27001, already in global organizations

• Knowledge of common frameworks and standards for the development and operation of information security management systems (e.g. NIST CSF, ISO/IEC 27001, COBIT, etc.)

• Practice in working with metrics and measurements including documentation and reporting, in designing global security training and awareness programs as well as in applying agile methods and project management frameworks

• Very good communication skills in German and English to discuss relevant information security topics internally and externally

• Team player personality with a high willingness to learn and a structured way of working

Sounds exciting? Then we look forward to receiving your application and your salary expectations.