Information Security Officer

Responsibilities:

Taking the position as Information Security officer (ISO) you will

• develop, implement, and manage an organization's information security program, protecting data and systems from threats by overseeing security policies, risk management, incident response, and employee training.
• Overseeing the implementation and enforcement of security measures, standards, controls, and systems (e.g., ISMS, SIEM) in all development and construction projects and operational assets.
• Manage and monitor compliance with ISO 27001, IEC 62443, and NIS Regulations across OT/IT environments.
• Supporting requests about IT- and Cybersecurity from technical and customer perspective
• Conduct and document periodic compliance reviews, audits, and risk assessments.

The Officer will serve as contact for regulatory authority regarding compliance and will oversee alignment with ISO/IEC 27001, IEC 62443, NIS2, and the company’s Information Security Management System (ISMS).

This role combines strong governance responsibilities with hands-on security activities to ensure that OT/IT Security controls are effectively implemented and enforced at operational sites in a pragmatic manner.

Qualifications:

• You do have min. 5 years’ experience in cybersecurity, with at least 3–5 years in OT/ICS security within critical infrastructure, energy, utilities, or industrial environments.
• A successfully completed degree in computer science / business/ business informatics and a strong understanding and experience in working with
• IT-Sicherheitskatalog (IT-Safety-catalogue) requirements.
• A significant amount of knowledge in IT & Operational Technologies (OT), including industry standards IEC62443, NIST SP 800-82 and strong analytical thinking skills paired with a high focus on results and services round off your profile.
• Excellent written and verbal communication skills in English.
• Preferred you are a certified ISO27001 Implementer and Auditor