Carl Zeiss AG's Corporate Information Technology (CIT) drives innovation in security solutions to enhance efficiency and competitiveness. By collaborating with business units, CIT ensures seamless integration of technological advancements into business processes.
Job Description:
Enhance the Information Security Incident Response and Management process, aligning with regulatory and business requirements.
* Define, document, and improve incident response policies, workflows, and playbooks to standardize and strengthen response activities.
* Provide strategic guidance and operational support to the Cybersecurity Incident Response Team, ensuring adherence to best practices.
* Govern and optimize the use of the ServiceNow Security Incident Response module.
* Collaborate with stakeholders and external partners to ensure process integration and operational efficiency.
* Enhance automation and reporting capabilities within ServiceNow SIR.
* Design and lead tabletop exercises to test and refine incident response strategies.
* Develop training programs and awareness initiatives to elevate incident response maturity.
As a Process Owner for Information Security Incident Management, you will govern, coordinate, and continuously improve Carl Zeiss AG's security incident response and management process. Your role is to ensure the process framework aligns with industry best practices, regulatory requirements, and organizational objectives.
Required Skills and Qualifications:
* Bachelor's degree in Computer Science, IT Security, Business Process Management, or a related field.
* At least 5 years of experience in cybersecurity, IT service management, or security operations, with a focus on process ownership and governance.
* In-depth knowledge of incident response frameworks, security operations, and process management.
* Strong understanding of risk management, industry security standards, and compliance requirements.
* Ability to analyze complex security incidents and drive strategic process improvements.
* Excellent communication and stakeholder management skills.
* Structured and analytical mindset with a strong focus on continuous improvement.