.IT - Security Manager (m/f/div) Location: Nationwide | Administrative location Application deadline: September 17, 2024 Employment: Part-time, full-time Starting date: immediately Ausschreibungsnummer: 16-023-2024 Remuneration: Pay group 12 TV Entg O-DRV Field of activity As the central service provider of the DRV Bund, Department 16 "Corporate Security" is responsible for IT and physical security, the protection of personal data, confidentiality and emergency management as well as basic and cross-sectional tasks. Department 1606 ISM-SWAT is responsible for the coordination, evaluation and follow-up of the DRV Bund's information security management in accordance with the IT baseline protection standards of the Federal Office for Information Security. Your tasks You support the information security management of the DRV Bund in the PDCA cycle in accordance with the IT baseline protection requirements You coordinate the guidelines, concepts and instructions for implementing information security at the DRV Bund and help to create and maintain them You will help coordinate the DRV Bund's IS risk management and support the assessment and aggregation of risks You are responsible for the technical support and management of the ISMS tools used You prepare the acceptance of security concepts by the IT security officer and organize audits You monitor and report on the implementation status of security measures to the IT security officer and contribute to the management report Your profile You have successfully completed a university education (Bachelor/Diploma/FH or equivalent) in the IT/IT security field or have successfully completed vocational training in the IT field with several years of professional experience or a comparable qualification with many years of professional experience in the IT environment or in other management systems You have initial task-relevant professional experience in IT security You have a very good command of written and spoken German Certifications in the field of IT security (BSI IT baseline protection practitioner, CISA, CISSP, TISP or similar) are desirable Proven knowledge of BSI standards 200-1, 200-2 and 200-3 as well as basic knowledge of ISO 27001 is desirable Practical experience with ISMS or risk management tools is desirable We offer you An interesting and varied job with all the benefits of a large public employer A family-oriented company with flexible and service-oriented working hours The health of our employees is important to us. We support the practical implementation of occupational health management in everyday working life If the requirements of labor law are met, work can be performed predominantly in the home office at the home workplace after induction Further information To fill the position, we will conduct a selection interview with the most qualified applicants. This is a corruption-prone position, so particular reliability and integrity are expected
