Global Information Security Manager at Indeed

Berlin, Berlin, Germany -

Full Time

Start Date

Immediate

Expiry Date

11 Jan, 27

Salary

80000.0

Posted On

13 Oct, 26

Experience

19 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Yes

Skills

Industry

Information Technology & Services

Description

Key responsibilitiesABOUT THE ROLEThe Global Information Security Manager is nxzen's accountable day-to-day owner for information security governance and operations. The role will lead the ISMS, cyber risk and control environment, incident readiness, security assurance and the operating relationship with internal IT, offshore security resources, external SOC/providers, auditors and customers.Own and mature nxzen's ISO 27001 ISMS, including policies, risk treatment, control ownership, objectives, evidence and management review.
Own the cyber risk register and monthly control/risk review, escalating material risk acceptance decisions to the Group COO / appropriate executive.
Lead vulnerability governance, remediation ageing and control effectiveness, working with onshore and offshore technical resources on execution.
Own incident triage and the cyber incident operating model; lead material incidents with Group COO involvement and specialist support where required.
Define and embed SOC operating responsibilities, escalation paths, playbooks and effectiveness testing.
Own security assurance for audits, certifications and customer requests, with specialist technical support used selectively for complex matters.
Lead BCDR security governance and support the broader business continuity programme, ensuring security and technology dependencies are understood and tested.
Own information-security policies and standards, including identity/access, device/security requirements and supplier security expectations.
Coordinate supplier security assurance and third-party information-security due diligence.
Drive recurring security awareness with People and Ch.
Produce clear monthly/quarterly security MI, risk and control reporting for the Group COO and ExCo/Board.

What we’re looking forAn operator rather than a policy-only security professional: someone who will make controls work day to day.
Commercial judgement and proportionate risk thinking, particularly in a business serving Critical National Infrastructure clients.
Confidence to challenge constructively and escalate when control or customer risk is material.
High ownership and follow-through without building unnecessary bureaucracy.
Someone comfortable creating structure from an immature starting point and then embedding it into BAU.
A collaborative leader who can work effectively with Jagadish/IT, Tracey/Compliance, P&C, Delivery, Finance, offshore teams and senior cyber specialists.
Customer-facing credibility: able to explain nxzen's security position clearly without overclaiming maturity.
A pragmatic mindset that balances security, user experience, delivery speed and cost.

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities