Information Security Officer (ISB) (m/f/d) | Critical infrastructure | Ruhr area

Role Summary

THE CHALLENGE

The information security officer (ISB) assumes central responsibility for the establishment, further development and sustainable anchoring of information security in the company.

The core tasks include

• Control and further development of the ISMS (e.g. according to ISO 27001 / BSI-Grundschutz)
• Ensuring compliance with regulatory requirements in the KRITIS environment
• Advising management and executives on security-related issues
• Carrying out risk analyzes and deriving suitable measures
• Raising awareness and training of the organization in the area of information security
• Coordination of audits and collaboration with internal and external audit bodies
• Interface management to IT, data protection, compliance and operational units

The context is characterized by

• high regulatory dynamics
• increasing threats in cyberspace
• grown IT and process landscapes
• Tension between safety, operation and economic efficiency
• increasing strategic relevance of information security

WHAT MAKES THE ROLE SPECIAL

This position offers the opportunity to not only implement information security operationally, but also to shape it strategically.

• We are not looking for a purely coordinating role, but rather a personality who:
• Security anchored as an integral part of the organization
• mediates between regulatory requirements and operational reality
• creates structures that enable long-term resilience
• acts as a trustworthy sparring partner for top management

Requirements

• Several years of experience in the area of information security, ideally as an ISB or in a comparable function
• Sound knowledge of relevant standards and regulations (e.g. ISO 27001, BSI, NIS2, KRITIS)
• Experience in setting up and operating information security management systems
• Ability to prepare complex issues in a way that is appropriate for the intended audience – from the operational area to management
• Structured, analytical and risk-oriented way of working
• Confident appearance as well as strong communication and assertive skills

Experience in regulated environments or organizations with critical infrastructure is an advantage.

About the Company

Our client is an established organization of critical infrastructure in the Ruhr area.

The company stands for high supply relevance, complex operating structures and a strong social mission. Several thousand employees contribute to the stability and security of central services every day.

• The organization is currently in a phase of increased requirements for:
• Cyber resilience and information security
• regulatory compliance (including KRITIS, NIS2)
• Digitalization of business-critical processes
• Professionalization of governance structures

Information security is a central component of corporate strategy and is becoming increasingly important at management level.

ABOUT VALPEO

VALPEO is an international leadership boutique with a focus on executive search, succession planning and leadership dynamics.

We work with owners, managing directors and investors to make leadership visible and sustainably strengthen organizations in complex phases.

Our approach combines structured diagnostics, strategic understanding and in-depth examination of leadership and decision-making maturity.