About medac

As a dynamically growing pharmaceutical company, we are committed to people's most valuable asset - health. We work with more than 2,000 employees worldwide for the common goal of improving the quality of life of patients (m/f/d). We specialize in the development and manufacture, distribution and marketing of pharmaceutical products in the areas of rheumatology, urology, hematology and oncology. Our work is much more than a job: we really want to make a difference.

At our Wedel location near Hamburg, we are looking for you as an Information Security Expert (m/f/d).

You can do that with us

• Responsibility for the secure operation as well as the continuous optimization and further development of the global security infrastructure - including technical protective measures, operating standards and traceable security documentation
• Design and continuous development of secure cloud architectures based on zero trust principles, including identity, authorization, network and data protection controls in a global corporate environment
• Carrying out and documenting protection needs assessments, risk analyzes and security architecture reviews as well as deriving prioritized measures based on recognized standards and frameworks, in particular BSI-IT-Grundschutz, NIST Cybersecurity Framework and CISA Cybersecurity Performance Goals
• Planning and implementation of group-wide IT security projects as well as further development of the security architecture across the entire life cycle - from governance and prevention to detection and response to recovery
• Planning, carrying out and supporting internal and external audits and control assessments; Structured tracking of findings as well as implementation and effectiveness testing of agreed improvement measures
• Independent creation, implementation and maintenance of security guidelines, standards and processes as well as translation of regulatory and contractual requirements into verifiable technical and organizational controls
• Advise internal teams on security requirements and work closely with network, infrastructure, cloud, support and application teams, particularly on hardening, vulnerability management, logging and monitoring, and security incident handling
• 
  

This is what you bring with you

• Study of business informatics, information security or a comparable qualification with relevant practical experience
• Several years of experience in operational and conceptual IT security, ideally in a regulated, international environment
• Knowledge in the areas of protection needs and risk assessment as well as BSI-IT-Grundschutz, NIST CSF and CISA recommendations
• In-depth knowledge of network, perimeter and cloud security, especially firewalls, segmentation, Azure and/or Google Cloud
• Security when dealing with Windows / Linux security, endpoint security, EDR / MDR, vulnerability management and monitoring
• Experience with IAM, privileged permissions, MFA, Zero Trust and security risk tracking
• Knowledge of the introduction of IDM systems and implementation in a global corporate environment
• Experience with audits, control assessments and incident response; ISO / IEC 27001 knowledge is an advantage
• Analytical, independent way of working and confident communication in German and English

About medac

As a dynamically growing pharmaceutical company, we are committed to people's most valuable asset - health. We work with more than 2,000 employees worldwide for the common goal of improving the quality of life of patients (m/f/d). We specialize in the development and manufacture, distribution and marketing of pharmaceutical products in the areas of rheumatology, urology, hematology and oncology. Our work is much more than a job: we really want to make a difference.

At our Wedel location near Hamburg, we are looking for you as an Information Security Expert (m/f/d).

You can do that with us

• Responsibility for the secure operation as well as the continuous optimization and further development of the global security infrastructure - including technical protective measures, operating standards and traceable security documentation
• Design and continuous development of secure cloud architectures based on zero trust principles, including identity, authorization, network and data protection controls in a global corporate environment
• Carrying out and documenting protection needs assessments, risk analyzes and security architecture reviews as well as deriving prioritized measures based on recognized standards and frameworks, in particular BSI-IT-Grundschutz, NIST Cybersecurity Framework and CISA Cybersecurity Performance Goals
• Planning and implementation of group-wide IT security projects as well as further development of the security architecture across the entire life cycle - from governance and prevention to detection and response to recovery
• Planning, carrying out and supporting internal and external audits and control assessments; Structured tracking of findings as well as implementation and effectiveness testing of agreed improvement measures
• Independent creation, implementation and maintenance of security guidelines, standards and processes as well as translation of regulatory and contractual requirements into verifiable technical and organizational controls
• Advise internal teams on security requirements and work closely with network, infrastructure, cloud, support and application teams, particularly on hardening, vulnerability management, logging and monitoring, and security incident handling
• 
  

This is what you bring with you

• Study of business informatics, information security or a comparable qualification with relevant practical experience
• Several years of experience in operational and conceptual IT security, ideally in a regulated, international environment
• Knowledge in the areas of protection needs and risk assessment as well as BSI-IT-Grundschutz, NIST CSF and CISA recommendations
• In-depth knowledge of network, perimeter and cloud security, especially firewalls, segmentation, Azure and/or Google Cloud
• Security when dealing with Windows / Linux security, endpoint security, EDR / MDR, vulnerability management and monitoring
• Experience with IAM, privileged permissions, MFA, Zero Trust and security risk tracking
• Knowledge of the introduction of IDM systems and implementation in a global corporate environment
• Experience with audits, control assessments and incident response; ISO / IEC 27001 knowledge is an advantage
• Analytical, independent way of working and confident communication in German and English