Risk & Compliance Lead 1 - Duesseldorf, Deutschland - Vodafone

Vodafone

Geprüftes Unternehmen

Duesseldorf, Deutschland

vor 1 Woche

Geschrieben von:

Lena Wagner

beBee Recruiter

Beschreibung

Our Team:

Cyber Security:

At Vodafone Global Cyber Security, we help our customers to remain secure and resilient in a world of increasingly sophisticated cyber-attacks.

We offer a unique combination of highly resilient networks, enterprise-class cloud platforms, advanced security systems and expert advice, helping limit the risks of a mobile workforce, such as commercial losses, regulatory breaches or threats to individuals, whilst enabling productivity and employee satisfaction.

Joining us as an Information security Officer, you can be part of our empowering our Cyber Security function. The Future is exciting. Ready?

The Information Security Officer reports to the Sr Mgr Cyber, Functions, Risk&Audit Lead; the role's purpose is to maintain and manage the security compliance and certification for specific Vodafone Business hosting environments.

The ISO is responsible for handling all information security issues for those services within the scope of the certification programme.

With us you will:

Controlling and Governing the information security process
Providing management with support when creating additional control requirements of information security wrt BSI requirements
Coordinating the creation of the security concept, the contingency planning concept, and others
Responsible for development and undertaking successful preparation for ISMS audits based on standards such as NIST, ISO27001 and BSI IT-Grundschutz
Ensure compliance targets are met in a timely fashion with evidence of compliance
Lead and operate effective 3rd party compliance programme for partners, vendors, resellers and suppliers
Point of contact for the organisation and the certification bodies
Ensure emergency and business continuity objectives of VC&S operations
Governance and status reporting to senior management
Willingness to get involved in other security activities as per requirements

Security frameworks including NIST, ISO27001, BSI IT-Grundschutz within a hybrid environment
Understanding of information security encompassing control technologies, risk and compliance
Strong stakeholder management skills
Strong verbal and written communication. Fluent German is a key requirement
Knowledge and experience with cloud services such as AWS, Azure and Google
Critical thinker and strong problem-solving skills
Very good knowledge in German and English

Must have technical / professional qualifications:
ISO 27001 Lead Auditor
IT-Grundschutz Practitioner (desirable)
Expert on Risk Management
Understanding of IT and Network technologies and controls

If you have any questions left:
globalresourcing

LI -Hybridworking

TogetherWeCan

SpiritofVodafone