• Anstellung: Berufserfahrene
• Start: ab sofort
• Standort: Hamburg
  SCAYLE Payments is the fintech behind the ABOUT YOU marketplace and ensures smooth payment processes for our customers.
  As Information Security Manager (m/f/d) you will be supporting the ISO of SCAYLE Payments. You will also be building a collaboration and communication bridge between SCAYLE Payments ISMS and the AboutYou Group ISMS while leaving your own footprint for a BaFin regulated entity. This includes carrying out safety assessments, training and awareness-raising, risk assessments, and continuous improvements.

REQUIREMENTS

• Degree in Information Security, computer science or economics or a comparable course of study
• 2-3 years of relevant professional experience in a consulting company, an industrial company or a corresponding in-house function
• Certifications are beneficial, e.g.: Information Security Officer (TÜV ISO), ISO 27001 Lead Auditor or Certified Information Systems Auditor (CISA)
• Solid knowledge of German IT Regulation (DORA, BSI)
• Self-driven individual, business fluent in written and spoken English, coupled with strong communication skills
• Communication and presentation, to be both the subject matter expert and advocate for information risk management in the executive suite

YOU ARE THE CORE OF ABOUT YOU

We take responsibility for creating an inclusive and exceptional environment where all genders, nationalities and ethnicities feel welcomed and accepted exactly as they are. We believe that a diverse workforce essentially contributes to the ABOUT YOU culture. In order to maintain talent and diversity, we emphasize the care for physical health, mental health and overall well-being. Our values and work ethics essentially contribute to our brand mission: empower acceptance and shape an inclusive, fair and circular fashion culture.
Because of our strong growth, new challenges and possibilities arise all along to further develop oneself and the company. Our team consists of people from different areas of expertise – fashion, marketing, business and tech – we are driven and united by our passion. We motivate and support each other, we share our know-how and we are open towards different opinions and new ideas.
We are looking forward to receiving your application – preferably via our online application portal! Thus, we can ensure a faster process and for you it is very easy to upload your application documents.

• Supporting the operation and continuous improvement of our internal ISMS after ISO 27001:2022
• Conducting regular control testing exercises and document results
• Controlling and coordinating the information security process in the institution, monitoring it, as well as to monitor this towards IT service providers and participating in all related tasks
• Participating in the creation and updating the emergency concept with regard to information security issues
• Initiating and monitoring the implementation of information security measures
• Monitoring and influencing compliance with information security in projects and procurements
• Being available as a contact person for information security issues within the institution and for third parties
• Investigating information security incidents and reporting them to management
• Initiating and coordinating awareness-raising and training measures on information security