Business Information Security Officer (w/m/d) — Valora Group

Full description

Do you want to actively shape Valora’s information security and minimize cyber risks in an international environment? Then you are exactly right with us! For our location in Muttenz, we are looking for a committed personality who brings our information security to the next level with expertise, foresight and a sense of responsibility. Tasks you will like

• Together with international stakeholders You transform the cybersecurity strategy as well as the Group’s security guidelines and minimum requirements into practical guidelines for Valora.
• Cybersecurity risks are identified, evaluated and documented by you. In addition, you accompany the departments in the planning and implementation of suitable risk reduction measures.
• As the central point of contact for information security, you support projects, transformation initiatives and architecture projects and ensure that security requirements are taken into account at an early stage.
• You keep an eye on compliance with security policies, standards and controls and accompany audits as well as regulatory requirements in the area of data protection and information security.
• Coordinate in the event of security incidents You’ll focus on local activities, support the analysis and work closely with internal and international security teams.
• In addition, you will develop and maintain the information security and governance framework for Valora and drive its continuous development.
• Regular analyses and reporting on security risks, maturity, key figures and improvement measures are also part of your area of responsibility.
• Stronger training, awareness-raising and targeted communication You promote security awareness and promote a sustainable security culture within the organization. Requirements that you bring
• Several years of professional experience in information security and IT risk management, ideally in a senior role such as CISO, Deputy CISO or BISO.
• Completed studies in computer science, information systems, cyber security, engineering or a comparable field of study.
• In-depth knowledge in the areas of cybersecurity governance, risk management, security architecture and cloud and identity security, preferably in the Microsoft environment.
• Experience with common safety standards and frameworks such as ISO 27001, NIST CSF, CIS Controls or MITRE ATT&CK.
• Recognized security certifications such as CISSP, CISM, CISA, CRISC or ISO 27001 Lead Implementer/Auditor are beneficial.
• Analytical thinking, high initiative and the ability to convey complex issues in an understandable way.
• Very good German and English skills in word and writing Advantages that we offer you
• A dynamic, international working environment with plenty of room for ideas and active participation.
• Various development and further education opportunities, including through our internal Valora Academy and live training courses.
• An uncomplicated corporate culture with direct exchange and a lively du-culture that promotes innovation and agility.
• Exciting projects and varied tasks with a great deal of room for manoeuvre and a great deal of personal responsibility.
• Attractive employee discounts for Valora formats and selected partners in the fields of leisure, sports, health and mobility.
• Attractive employment conditions with own pension fund and three flexibly selectable savings plans.
• Flexible working hours with flexibility and the possibility to work in the home office.