Your area of work
Eurex Clearing AG Information Security second line of defense organisation is responsible for the cyber security risk assurance program, cyber resilience, steering of IS processes, IS controls and IS compliance activities. As a Senior Information Security Specialist, you will support the Eurex Clearing AG's Chief Information Security Officer in a 2nd Line of Defense role. Being part of a team organized as a unit you will develop and manage information security and risk controls in close collaboration with other Deutsche Börse Group functions and entities. The Senior Information Security Specialist will have further responsibility as Chief Information Security Officer for another regulated EUREX entity.
Your responsibilities
1. Support the implementation and maintenance of the information security risk assurance program, including IS control requirements consistent with ISO 27000-series based on the analysis of the threat landscape, applicable policies, standards, and regulations
2. Analyse, improve and document information security aspects in relevant business and IT processes
3. Conduct risk assessments and support reporting on material risks and further Information Security related topics as part of the quarterly reporting to the executive and supervisory boards
4. Control and assess service providers, i.e. monitor services, work products, KPIs, and controls compliance
5. Provide required evidence in audits (internal audits, ISAE reports, regulatory or customer questionnaires)
6. Conduct ongoing and yearly review tasks regarding Risk Management, Outsourcing and Material Change Management
7. Support incident handling and track incidents together with CERT
8. Actively and professionally engage with business operations and IT in conversations that drive adequate IS risk decisions
9. Ensure employees and third parties understand, acknowledge, and fulfil all applicable information security policy requirements
Your profile
10. University degree (master or diploma) in IT or business administration or comparable education; IT knowledge is a must
11. Minimum 4 years of experience in IT security, information security risk management, or IT audit in the financial sector, preferably with focus on 2nd LoD activities
12. Experience with information security risk management frameworks, esp. ISO 27000
13. Analytical skills and experience to understand, structure and prepare/explain complex topics; end-to-end thinking required
14. High self-responsibility & ownership; result orientation and (internal) customer focus
15. Ability to develop a full and deep understanding of the business / IT operations and related information security risks
16. Proficiency in written and spoken German and English
Why Deutsche Börse Group?
We are committed to providing a work environment where everyone feels welcome and can reach their full potential. Our standards go far beyond simply matching candidates with the right position.
Mobility
We enable you to move freely with our job tickets, job (e-)bikes and free parking opportunities.
Work environment
Collaboration, communication, or deep focus – in our modern office buildings you will find the perfect work environment. Free drinks and food and meal allowances included.
Health and wellbeing
We care for your health and wellbeing and besides various health promotion measures we offer you a group accident insurance and additional insurance offers at discounted rates.
Financial stability
We provide financial stability by offering attractive salaries, company pension schemes, participation in our Group Share Plan, as well as bonuses, subsidies and discounts.
Hybrid work
Collaborate and exchange on-site or work remotely several days a week in line with business needs and local regulations. Our hybrid working model combines the best of both worlds.
Flexible working hours
We want your job to fit your life situation and offer flexible working time models, childcare allowance, or the possibility to study alongside your job.
Internationality
Our market infrastructures are globally connected. Working with us means collaborating with like-minded colleagues across over 60 locations from more than 100 nations.
Development
We promote individual development by offering internal development programmes, mentoring, further education and training budgets.