Information Security & Business Continuity Officer

Descrição do emprego

As Information Security & Business Continuity Officer, you will ensure that the proper governance is in place in the respective local entity to align the information security strategy with our business strategy and to support the respective local entity to implement the needed organizational and technical measures to manage risks and regulatory obligations and to increase the overall level of maturity in regards of Information Security.

Responsabilities:

Implement and adapt the METRO AG ISMS to secure the adherence of the local organization and partners to METRO AG ISMS, guidelines and requirements related to Information Security;
Plan and coordinate the execution of IT and IS risk assessments (including Third-party risks);
Develop and implement yearly action plan to reduce risks level and increase maturity level aligned with METRO continuous improvement process and ambitions set by METRO AG Board;
Develop and execute awareness campaign and targeted training for all business functions in the local organization;
Report IT and IS related information (risks, incidents, and KPIs) to the CISO organization;
Oversee and coordinate incident response crisis management in relation to information security in collaboration with the CISO organization at METRO AG;
Support the Legal department with evaluation of relevant information security local laws and regulations;
Collaborate with the local Data Protection Officer (DPO) and Local Security Officer (LSO) to define, manage and improve relevant interfaces;
Manage the contact with local cybersecurity agencies (if needed)​;
Implement and adapt the Business Continuity Management (BCM) Plan of METRO AG to the local organization;
Report information and activities related to the definition and execution of the local business continuity plan to the BCO of METRO AG;
Supervise and coordinate crisis management and incident response in collaboration with the local organization and the CISO/BCO of METRO AG;
Perform local information security assurance activities (pen-testing, etc.) and business continuity activities (training, testing, etc.);

Qualificações

Qualifications:

Bachelor’s or Master’s degree in Management, Computer Engineering, or Security.
More than 2 years working in large companies/group;
Proficient in English;
ISO 27001 certification (should be a plus);
ISO 22301 certification (should be a plus);
Project track record in similar position;