The PSI Group develops software products for optimizing the flow of energy and materials for utilities and industry. As an independent software producer with more than 2,300 employees, PSI has been a technology leader since 1969 for process control systems that ensure sustainable energy supply, production and logistics by combining AI methods with industrially proven optimization methods. The innovative industry products can be operated on-premises or in the cloud.Tasks inspiring youSupport, drive and improve PSI’s information security strategy on a wide range of topicsShape and improve our information Security Management System (ISMS) in a sustainable and feasible wayPerform information security governance related tasks (e.g. policy creation and management for all information security topics, process creation and improvements, information security framework improvements)Requirements management for information security (e.g. around ISO 27001, NIST CSF, KRITIS, ISO 27017, ISO 27019)Support information security reviews and reporting (e.g. maturity assessment)Perform and improve information security risk management activities (e.g. risk identification, evaluation and assessment) from a general perspectiveStakeholder communication and collaboration across all our business units and legal entities on all levels (engineers, engineering managers, technical product managers, product owners, leadership, etc.)Participate in information security relevant due diligence activities (e.g. vendor and product assessments)Participate and support in relevant audit preparations such as for ISO 27001 and TISAXStrengthen the information security and data compliance culture and support information security knowledge managementAssist in incident management activitiesQualifications that inspire usInfoSec Management and ISMS (ISO 27001, NIST, etc.) knowledgeGeneral business and organizational understanding best in software development industryExperience in information security governance activities (e.g. create, improve and implement processes, policies as well as perform control activities)Strategic thinking to ensure we follow a sustainable way and don’t forget the big pictureRisk Management experienceGeneral cloud security knowledge (GCP and Office365)Analytic skills: you think things through and are a thought leaderOwnership mindset for tasks: You take end-to-end responsibility for a task from idea/start to finishGood understanding of lean and agile practicesGood communication and interpersonal skillsOperational excellence and maturity knowledgeFluency in written and spoken English (German is a plus)Data Compliance knowledge (GDPR, CCPA, etc. ) as plusGreat enthusiasm for Information SecurityIntrinsic motivation, never ending curiosityQuick thinking and continuous learning personality and thus are able to dive into new topics quickly, filter and digest the relevant informationInquisitive and analytical mindsetGreat communication skills, clear and to the pointProactivity driver attitude happy to collaborate with othersAbility to work comfortably in a lean and agile environmentNice-to-haveInformation Security Management (ISMS) certifications (e.g. CISM, ISO 27001 LA,...)Data Privacy relevant certifications (e.g. CIPM, CIPP/E)Cloud security relevant certifications (e.g. GCP Cloud Engineer, GCP Security, MS365 etc.)Terraform experienceRequirements management experienceLook forward toStock programDevelopment & TrainingFlexible Working TimePioneering a smarter world. Are you on board?Does this sound like the right challenge for you? Then we look forward to receiving your CV and cover letter, stating your salary expectations and earliest possible starting date.Your contactUteGraalmannHR ManagerPeople & Organizationugraalmann@psi.de #J-18808-Ljbffr