Your Responsibilities:Develop, implement, and maintain cybersecurity policies, standards, and proceduresConduct risk assessments, threat modeling, and vulnerability assessments, including technical security audits and penetration testingPrepare and support internal/external audits and certifications (e.g., TISAX, IATF 16949, ISO/IEC 27001, ISO 31000)Monitor and investigate security alerts, respond to incidents, and manage follow-up actionsLead improvements in detection and response workflows with SOC and IT stakeholdersOrganize, manage, and evaluate external penetration testing and vulnerability scansOperate and improve security infrastructure such as SIEM, EDR, IDS/IPS, firewalls, etc.Supervise vulnerability remediation, patch cycles, and endpoint protection strategiesPlan and deliver cybersecurity awareness campaigns, simulations, and targeted trainingYour Profile:Degree in information security, computer science, or a related technical disciplineFurther training or certifications in cybersecurity or ethical hacking preferredProfessional credentials such as ISO/IEC 27001, CISSP, or TISAX® auditor are an assetMinimum of 3 years' experience in a similar role, ideally in an international companyAt least 5 years of technical experience implementing security concepts and controlsFamiliarity with SOC/CSIRT operations and experience handling major security incidentsProficient with Microsoft 365 administration, network security, and layered IT architecturesStrong knowledge of security management tools for vulnerabilities, assets, and servicesFluent in English (spoken and written); German or additional languages are a plusWillingness to travel internationally on occasionWhat we offer:A challenging environment in a global industry-leading companyPossibility of some remote work, while regular on-site presence is encouragedAttractive employment conditions, professional development, and career growth opportunitiesA collaborative and forward-thinking team culture
