Távmunka állások Németországban (információbiztonság)

Develop and drive the implementation of Cloud Data Security strategy in alignment with the Product Manager, Tech Lead, and Engineering Manager....

• Define, maintain, and enhance governance controls for firewall management in line with internal policies, DORA, and BaFin requirements.
• Conduct second line reviews of firewall configurations, rule changes, and network segmentation to ensure compliance and risk reduction.

Analysis: you will support our partners in innovative projects and develop customized technological concepts that make our processes easier and more efficient....

Own and optimize the security incident management process and related tools, also ensure alignment and integration of related processes: information security, corporate security, product security, IT security, data privacy, and crisis management...

Incident Response & Monitoring: Participate in on-call rotation for security incidents, manage EDR/SIEM detection rules, and conduct threat/APT monitoring, hunting, and simulation to detect and mitigate malicious activity....

Lead the Security Organization: Oversee and mentor the members of Security Operations, Cloud Security, Product Security, and Security Engineering. Build a cohesive, high-performing security culture across teams. Define a company-wide security vision and roadmap. Align goals, KPIs, and initiatives...

• Design and implement security architecture for our Internal Developer Platform
• Drive adoption of Zero Trust principles across platform components, networks, identities, and services

• Be a part of the bank's risk function (2nd Line of Defense), reporting to the Senior Lead of Group Data Governance Strategy within the CISO team
• Collaborate with all the CISO teams to align training with the latest security risks, emerging regulations, and organizational objectives.

• Maintain, further develop and continuously improve our Europe-wide Information Security Management System to ensure its ongoing effectiveness
• Support in reviewing and optimizing current processes in accordance with industry standards and best practices

• Monitor security events and investigate alerts to identify potential threats.
• Handle IT security incidents following established procedures and escalate when necessary.
• Operate SOC tools and collaborate with the external MSSP for SIEM alert management.

• Design, develop, and integrate components for establishing trust (e.g. via SPIFFE) and securing network connections (e.g. mTLS, IPSec, Wireguard) in dynamic environments
• Leverage existing Open Source software to implement state of the art security features