Information Security Officer (m/f/x)

at  Cloudflight

At Cloudflight, we’re committed to making a digital difference. It’s a difference that impacts businesses and society alike and one that’s fueled by our passion for technology and our dedication to sparking the brightest ideas in ourselves and others.
Together, an experienced team of over one thousand brilliant people, we collaborate to create value-driven custom software solutions.
The Information Security Officer (ISO) is responsible for developing, implementing, and managing Cloudflight’s information security program. This role involves working closely with various departments to ensure our cybersecurity strategies are aligned with business objectives while mitigating risk and ensuring regulatory compliance. The ISO plays a key role in maintaining our security posture by overseeing vulnerability assessments, managing incident response, and fostering a security-first culture throughout the organization.

KEY RESPONSIBILITIES

• Developing and implementing security strategies and policies to protect IT infrastructure while ensuring compliance with legal and regulatory requirements (e.g., GDPR, ISO 27001)
• Establishing and maintaining the necessary requirements for ISO 27001 certification
• Conducting security risk analyses and vulnerability assessments
• Developing risk mitigation strategies and contingency plans to address potential threats
• Monitoring the organization’s security posture and identifying emerging threats
• Preparing regular reports on the security status and incidents for the management team
• Conducting security training and awareness programs for employees with the goal to foster a security-first culture across the organization
• Collaborating with IT teams, to close security gaps and implement protective measures, as well as external partners and authorities
• Continuously improving the security architecture to adapt to emerging threats and challenges

THE FOLLOWING WILL MAKE YOU SUCCEED IN THIS ROLE

• Bachelor’s degree in Computer Science, Information Technology, or a related field
• Minimum of 5 years of experience in information security or IT security management
• Knowledge of common security standards and frameworks (e.g. ISO 27001, ISO 3011, ISO 29147, NIS2, DORA)
• Expertise in preparing for and obtaining ISO 27001 certification
• Experience with security technologies (e.g. Firewalls, IDS/IPS, SIEM)
• Beneficial: relevant certifications (e.g. CISSP, CISM, CISA)
• Strong analytical, problem-solving, and project management skills
• Excellent communication and teamwork skills
• Business fluency in both English and German
  We are an equal opportunity employer. We strive to create an inclusive environment where everyone can thrive regardless of their background and circumstances. All applicants receive equal opportunity regardless of age, gender identity or expression, language, disability, ethnicity, national origin, religion, or sexual orientation.
  We will go through your application and come back with feedback.
  Any questions? Contact us at jobs@cloudflight.i