Security Portfolio Manager Microsoft/M365 (m/f/d)

at  Deutsche Post DHL

DHL Group - we are the world’s leading logistics provider. Our company connects people and markets, enabling global trade. We pursue the strategic goals of being the first choice worldwide for customers, employees, and investors. Through responsible entrepreneurial actions and commitment to society and the environment, we make a positive contribution to the world.
As part of the Group Chief Information Security Office, the department “Cyber Security Strategy & Portfolio Management” is responsible for the (further) development and implementation of global cyber security strategies, with the aim of protecting the DHL Group from cyber threats. It works closely with internal departments, divisional business and IT functions, as well as service providers within overarching initiatives and programs. Sounds exciting to you? Then we look forward to receiving your application as
Security Portfolio Manager Microsoft/M365 (m/f/d)
Bonn | Full-time | Permanent

• (Further) develop and implement the global cyber security roadmap for M365, taking into account the corporate IT strategy.
• Develop and implement relevant cyber security policies, particularly in the context of the roll-out of M365 tools and services.
• Gather and assess M365 security requirements from business units in collaboration with IT Group Functions and IT Services.
• Developing M365 Cyber Security approaches, taking into account relevant compliance and privacy requirements, in coordination with Corporate Data Protection.
• Develop recommendations for presentation and consultation with internal Group committees, e.g. Information Security Committee (ISC), Service Management Committee (SMC), IT Board.
• Ensure the implementation of security requirements during the implementation of M365 tools and services in conjunction with Microsoft Key Account Managers.
• Regularly report to GCISO management on implementation progress and updates on cyber security in the M365 environment.
• Conducting ongoing M365 security assessments and risk analysis to identify potential vulnerabilities to the Group and derive recommendations for action.
• Act as a single point of contact and provide advice on cyber security issues in the Microsoft environment at a global level, as well as on cross-functional M365 projects.
• Design and deliver Group-wide training as part of awareness programs, in collaboration with Cyber Security Awareness, Training & Communications, IT Services and Corporate HR.