(Junior) Information Security Manager - IT Security
To see similar active jobs please follow this link: Remote System Administration jobs
Company Description
Job Description
We are looking for a (Junior) Information Security Manager to join our IT-Security team (Hamburg/remote Germany). In this role, you will help with the governance and compliance side of securing our online shop and B2B platforms, ultimately ensuring a safe shopping experience for our customers and a secure work environment for the employees.
Our security team ensures that visitors of our online shop have a safe shopping experience and their personal data is secure with us. In addition, the team also protects our corporate data and the equipment of our employees.
What will you do
Conduct risk analyses and assist in the implementation of compliance initiatives.
Collaborate on data preparation for internal and external IT audits.
Develop and implement processes in collaboration with the legal department and IT teams, particularly in response to new data protection regulations (e.g., GDPR).
Oversee and continuously improve our Information Security Management System (ISMS).
Create and enforce guidelines and process documentation with internal and external stakeholders, such as those related to access management and data deletion protocols.
Work closely with executive management, the legal department, and the external data protection officer.
Participate in agile projects within a motivated, international, and dynamic security team.
Who you are
Deep understanding of general data protection legislation, e.g. DSGVO, and information security standards and frameworks such as ISO 27001 (ISMS) / CIS18 / NIST, PCI DSS, COBIT, ITIL, etc.
Strong understanding of IT-security risk frameworks such as ISO 27005 or BSI 200-3, including how to identify and measure and control risks within an organization
At least 1 year of experience in information security management.
Active participation in at least one GRC audit.
Strong understanding of risk management principles and methods for risk-based prioritization.
Analytical mindset with a structured approach to problem-solving and implementing security solutions.
Project management and stakeholder skills, capable of encouraging other departments and colleagues to adopt security best practices and methods
Fluent in written and spoken English.
Nice to have:
High-level knowledge of one of the major cloud computing providers: AWS, GCP, Azure
Experience in at least one coding language (e.g. Python, PHP, Go, Bash...).
Hands-on experience with incident response processes
Experience within the e-commerce sector
Benefits
Grow together with one of the fastest growing eCommerce companies in Europe
Flexible working times (10 AM - 16 PM German Time Zone as core working-time)
40% discount on our online shop
Fresh fruits + drinks everywhere
Language courses (German & English)
Free sports courses & reduced price for gym membership
Subsidized public transportation ticket
Free choice of hardware and operating system (Mac, Windows, Linux) also for private usage
State-of-the-art tech stack running on AWS
Modern office in the city center of Hamburgs
International working environment and English as company language
Company flats (subject to availability)
Agile work environment (MOVE) and cross-functional teams
Free access to Germany’s greatest developer conference code.talks
Company pension scheme
Free access to online learning platforms like Laracast, Egghead and A Cloud Guru
Help in relocation and VISA process
YOU ARE THE CORE OF ABOUT YOU. We take responsibility for creating an inclusive and exceptional environment where all genders, nationalities and ethnicities feel welcomed and accepted exactly as they are. We believe that a diverse workforce essentially contributes to the ABOUT YOU culture. In order to maintain talent and diversity, we emphasize the care for physical health, mental health and overall well-being. Our values and work ethics essentially contribute to our brand mission: empower acceptance and shape an inclusive, fair and circular fashion culture. We are looking forward to receiving your application – preferably via our online application portal! Thus, we can ensure a faster process and for you it is very easy to upload your application documents.
(Junior) Information Security Manager - IT Security
To see similar active jobs please follow this link: Remote System Administration jobs
Company Description
Job Description
We are looking for a (Junior) Information Security Manager to join our IT-Security team (Hamburg/remote Germany). In this role, you will help with the governance and compliance side of securing our online shop and B2B platforms, ultimately ensuring a safe shopping experience for our customers and a secure work environment for the employees.
Our security team ensures that visitors of our online shop have a safe shopping experience and their personal data is secure with us. In addition, the team also protects our corporate data and the equipment of our employees.
What will you do
Conduct risk analyses and assist in the implementation of compliance initiatives.
Collaborate on data preparation for internal and external IT audits.
Develop and implement processes in collaboration with the legal department and IT teams, particularly in response to new data protection regulations (e.g., GDPR).
Oversee and continuously improve our Information Security Management System (ISMS).
Create and enforce guidelines and process documentation with internal and external stakeholders, such as those related to access management and data deletion protocols.
Work closely with executive management, the legal department, and the external data protection officer.
Participate in agile projects within a motivated, international, and dynamic security team.
Who you are
Deep understanding of general data protection legislation, e.g. DSGVO, and information security standards and frameworks such as ISO 27001 (ISMS) / CIS18 / NIST, PCI DSS, COBIT, ITIL, etc.
Strong understanding of IT-security risk frameworks such as ISO 27005 or BSI 200-3, including how to identify and measure and control risks within an organization
At least 1 year of experience in information security management.
Active participation in at least one GRC audit.
Strong understanding of risk management principles and methods for risk-based prioritization.
Analytical mindset with a structured approach to problem-solving and implementing security solutions.
Project management and stakeholder skills, capable of encouraging other departments and colleagues to adopt security best practices and methods
Fluent in written and spoken English.
Nice to have:
High-level knowledge of one of the major cloud computing providers: AWS, GCP, Azure
Experience in at least one coding language (e.g. Python, PHP, Go, Bash...).
Hands-on experience with incident response processes
Experience within the e-commerce sector
Benefits
Grow together with one of the fastest growing eCommerce companies in Europe
Flexible working times (10 AM - 16 PM German Time Zone as core working-time)
40% discount on our online shop
Fresh fruits + drinks everywhere
Language courses (German & English)
Free sports courses & reduced price for gym membership
Subsidized public transportation ticket
Free choice of hardware and operating system (Mac, Windows, Linux) also for private usage
State-of-the-art tech stack running on AWS
Modern office in the city center of Hamburgs
International working environment and English as company language
Company flats (subject to availability)
Agile work environment (MOVE) and cross-functional teams
Free access to Germany’s greatest developer conference code.talks
Company pension scheme
Free access to online learning platforms like Laracast, Egghead and A Cloud Guru
Help in relocation and VISA process
YOU ARE THE CORE OF ABOUT YOU. We take responsibility for creating an inclusive and exceptional environment where all genders, nationalities and ethnicities feel welcomed and accepted exactly as they are. We believe that a diverse workforce essentially contributes to the ABOUT YOU culture. In order to maintain talent and diversity, we emphasize the care for physical health, mental health and overall well-being. Our values and work ethics essentially contribute to our brand mission: empower acceptance and shape an inclusive, fair and circular fashion culture. We are looking forward to receiving your application – preferably via our online application portal! Thus, we can ensure a faster process and for you it is very easy to upload your application documents.