IT Information Security Manager (m/w/d)

Role Summary

Technical responsibility for the development and operation as well as the continuous development of an ISO27001-compliant information security management system (ISMS), including control and implementation of the preparation for the desired ISO27001 certification

• Identification, assessment and control of information security risks including definition and tracking of appropriate measures
• Develop, maintain and enforce information security policies, processes and standards
• Ensuring compliance with legal, regulatory and internal information security requirements
• Preparation, support and follow-up of audits, assessments and certifications as well as ensuring the ability to audit and provide evidence
• Function as the central contact person for information security towards management, departments, IT and external partners
• Advice and support for projects and departments regarding security by design and risk-oriented security requirements
• Control and coordination of collaboration with IT operations, data protection, compliance and other relevant stakeholders
• Development and further development of reporting and key figure systems for the transparent presentation of the information security level
• Support in dealing with security incidents (governance perspective) and deriving improvement measures

Professional responsibility for promoting, implementing and enforcing security awareness in the company, including controlling awareness measures, monitoring effectiveness and management reporting

Execution and technical responsibility for IT security audits as part of the IT sourcing board process

Requirements

• Completed studies in computer science, business informatics, IT security or comparable training
• At least five years of professional experience in the information security, IT security governance or ISMS environment
• Sound knowledge of the structure, operation and further development of information security structures (including ISMS)
• Good understanding of threat situations, security risks and protection needs for information, systems and business processes
• Experience working with IT, business departments and management to implement appropriate security measures
• Ability to define security requirements pragmatically, risk-based and implementation-oriented
• Structured, analytical and independent way of working with a high sense of quality and responsibility
• Strong communication skills and the ability to present complex topics in an understandable and appropriate manner
• Very good knowledge of spoken and written German and English

Benefits

Benefit from our attractive employer benefits such as

• Flexible working hours
• Flat hierarchies and high collegiality
• Possibility of mobile working

Have we piqued your interest? Then we look forward to receiving your application!

About the Company

As an innovative system and solution provider, Gerresheimer is the global partner of the pharmaceutical, biotech and cosmetics industries. The company offers a comprehensive portfolio of pharmaceutical primary packaging, drug delivery systems, medical devices and digital solutions for therapy support. Gerresheimer ensures that medications reach patients safely and can be administered reliably. With over 13,000 employees and 39 production sites in Europe, America and Asia, Gerresheimer has a global presence and produces locally for regional markets.