onducting risk and vulnerability analyses and deriving appropriate countermeasures - Developing and implementing security policies, processes, and awareness measures - Supporting incident response, audits, and security incidents - Contributing to the IT security strategy, taking into account regulatory requirements (BAIT, DORA, ISO 27001, GDPR) - Establishing processes for preventative threat mitigation (threat intelligence, security monitoring, AI-based anomaly detection) - Close collaboration with IT, data protection, compliance, and specialist departments - Ensuring up-to-date and traceable documentation.