Information Security Manager (m/f/d)

For this multifaceted position, we are looking for an experienced individual with excellent communication skills. You are motivated, enthusiastic about tackling new tasks, and always keep the big picture in mind. With your structured and efficient work style, you confidently master even complex challenges – whether working independently or as part of a team. You support your colleagues with your helpful nature and actively contribute to our shared success? Then we say: Welcome to the team!

Here's what you can look forward to:

• You will become part of the Operational Resilience Team at Aareal Bank. In addition to the advertised tasks, the team's responsibilities also include non-financial risk management, operational risk management, and third-party risk management.
• In your role, you will take on tasks in information security (cyber security).
• Specifically, you will identify, assess and manage information security risks, monitor compliance with legal and regulatory requirements and optimize our Information Security Management System (ISMS).
• You assess vulnerabilities in information security, support the creation of reports and presentations for management on information security topics, and collaborate on projects.
• Together with specialist departments and external partners, you will improve risk management and coordinate measures to reduce risks.
• You are particularly familiar with the risks arising from the use of AI and cloud services, and you are interested in helping to shape the management of these risks.
• Especially in light of new threats from AI, you will further develop our awareness concept.

We can look forward to this:

• Successfully completed studies in a STEM subject (mathematics, engineering, natural sciences, technology) or a comparable field
• Several years of relevant professional experience, including know-how in setting up an information security management system for financial institutions
• Experience in implementing legal and regulatory requirements (e.g. DOR, ISO 2700x)
• Expert in cybersecurity, information security, and AI governance
• Strong communication skills, a structured, results-oriented work style, and the ability to adapt quickly to new situations.

We do things differently: