INFORMATION SECURITY EXPERT (M/F)

Job description

Ref: req35963

Career function:Information Technology

Job family:IT Security

Role (grade):SE Information Security

Main tasks:

·Pursue the information security goals of the applications Safir, MyNet, OPEN, Crest etc. regarding to availability, confidentiality, and integrity of information and systems in order to improve the basic rules for dealing with cross-divisional assets, e.g., by improving the risk management processacross all divisions of the Group in consultation with the respective supervisor

·Advise projects on IT security and support the improvement of project scoping and definition

·Contribute to the identification and coordination of activities in the case of information security incidentsespecially for the products and services: network, e-mail, collaboration platforms (e.g., iShare / eShare), other end user services, as well as hosting.

·Support the further development and optimization of information security pertaining to the Group's reporting systems and contribute to defining and measuring the appropriate KPIs

·Apply rules to the issuing of security approvals with regard to compliance and contribute to defining cross-divisional guidelines and standards for the information security area

Role description:

Responsibility:

·Largely independently develop draft solutions for improving information security in the Group

·Largely independently develop decision papers for further developing information security

·Develop standards for ensuring information security and methods for implementing and checking standards in consultation with your supervisor

Customers:

·Customer contact at specialist and head of department level, e.g., in the legal, data protection, combating cyber-crime, IT shared services, and IT services areas

·Comply with service and quality standards in accordance with the DPDHL information security target model

Stakeholders:

·Manage relationships with specialists in the information security area (internally and externally) and with specialists from the Group

Processes:

·Contribute to process improvements in the information security area throughout the Group

·Apply best practices for the optimization of information security methods, systems, and processes

Employees:

·Induct trainee staff

·Take on an advisory role and instruct colleagues if required

·Contribute to projects

Desired profile

Skills/Qualifications:

·University degree in information technology or equivalent similar qualification

·At least two years of professional experience in the field of information security management is an advantage

·Ideally expert knowledge in the Certified Information Security field (CISM or CISSP)

·Proven extensive and up-to-date expertise in Information Technology – ideally with certification (e.g., Certified Ethical Hacker, ITIL, TOGAF, COBIT)

·Skills and experience in the improvement of business processes (ideally Six Sigma, First Choice Master, or equivalent certification)

·Skills and experience in project management methods (ideally Prince2 or equivalent certification)

·Very good knowledge of German and English spoken and written, or the willingness to acquire them

Personal qualifications:

·Excellent analytical and conceptual skills

·Ability to work with complex situations and to simplify/structure these

·Good communication and presentational skills

·Good team player and intercultural competence

·Ability to think creatively

Notes for applicants:

·Please submit your full application documents, stating the reference number, to Department 519 at Headquarters of Deutsche Post AG, Charles de Gaulle-Str. 20, 53113 Bonn, Germany.

·For further functional information, please contact Mr. Daniel Kautz on +49 (0) 228 182-27200.

·Deadline for submission of applications: 2 weeks

Contact: Mrs . Manuela Rohmann, tel. + 49 (0) 228 182-52103