Senior Information Security Officer

About the role

The Senior Information Security Officer will strengthen and maintain effective IT and business security practices across all Business Units in a highly regulated environment. Acting as the primary security liaison, you will guide, oversee and support the identification, assessment and management of security threats.

Key responsibilities

• Own the security relationship with Business Units, providing guidance on security requirements and decision support.
• Design and implement state‑of‑the‑art security solutions aligned with internal and external directives.
• Develop and enforce security best practices, including patch management and obsolescence processes.
• Manage third‑party supplier compliance with security standards.
• Innovate and streamline security processes for operational efficiency.
• Integrate effective security measures into all business projects and ensure security‑by‑design.
• Lead incident response activities, including analysis and remediation of breaches.

Required profile

• Bachelor’s degree in IT, IT Security, Engineering or equivalent.
• Minimum 5 years of experience in IT security or a related field.
• Strong communication and presentation skills in English; German proficiency is mandatory.
• Results‑driven, persistent, with a multicultural mindset.

Required skills

• Google Cloud security knowledge.
• DevOps experience.
• Familiarity with PCI DSS, ISO 27001 and DORA security frameworks.
• Security certifications such as CISSP or CEH (strong plus).