IT Security Operations Specialist

About the job

The SPT Roth Group develops and produces highly precise tools made of ceramic, hard metal and steel at its locations in Lyss and Asia. The company is one of the leading providers in the injection moulding of technical ceramics and holds a leading market position in its core product areas. The internationally active group of companies, with its headquarters in Lyss BE, employs around 1,000 staff and supplies customers from various industries. The quality products manufactured by highly qualified specialists are mainly used in the electronics, medical, dental, automotive and watchmaking industries.

Your role

As an IT Security Operations Specialist, you play a key role in the establishment, operation and further development of the IT security organisation in our internationally positioned company. You are hands-on and work globally and practically to increase the security level – especially in the engineering and production environment. You are responsible for the operation of the Information Security Management System (ISMS), the Security Awareness platform and work closely with IT Operations colleagues at our worldwide locations. Are you looking for impact instead of routine? Then bring your know-how where IT meets high-tech production – and security really matters.

Your tasks:

• Global coordination and further development of IT security measures in collaboration with the IT Operations teams in China, Singapore, the Philippines and Switzerland
• Operational support and further development of the ISMS including maintenance of policies, processes and security controls
• Structured recording, assessment, prioritisation and follow-up of security vulnerabilities, especially in the engineering and production environment, for example at OT interfaces, machine connections, user management and network segmentation
• Analysis and handling of security events as well as support in the investigation, containment and remediation of security incidents
• Operational support and further development of the deployed security solutions, especially in the areas of endpoint security, identity security, email security, logging and monitoring
• Monitoring and follow-up of security-relevant operational processes such as MFA, patch management, hardening and permission management
• Operation and continuous development of the security awareness platform including organisation of training campaigns and phishing tests
• Raising awareness and training of employees from engineering, production and administration in the secure handling of IT systems
• Participation in risk analyses, vulnerability management as well as internal and external audits
• Building and maintaining a security key figure system as well as participation in IT risk reporting
• Monitoring relevant international standards, frameworks and regulatory requirements, especially ISO 27001, NIST and CIS Controls
• Close cooperation with internal IT functions such as infrastructure and business applications to consider security requirements in projects and operations
• Collaboration with external security partners and service providers on security-relevant operational and incident issues

Your profile 

• Completed training in computer science, system technology or platform development or a degree with a comparable focus
• Several years of practical professional experience in IT infrastructure, IT operations or IT security
• Practical experience in several of the following areas: endpoint security, identity and access management, Microsoft 365, network security, logging, monitoring or vulnerability management
• Good technical understanding of IT systems, networks, user permissions and security processes
• Experience in operating, maintaining or further developing an existing information security management system is an advantage
• Experience with security policies, controls, risk analyses or audits is an advantage
• Knowledge of standards and frameworks such as ISO 27001, NIST or CIS Controls is an advantage
• Interest in security requirements in engineering, production and OT-related environments
• Willingness to familiarise yourself with new security technologies, processes and regulatory requirements
• Analytical thinking skills as well as a structured and solution-oriented working method
• Strong hands-on mentality and enjoyment of practical implementation
• Independent working style and consistent follow-up of agreed measures
• Team spirit and communication skills in an international and intercultural environment
• Very good German skills as well as good English skills in spoken and written form
• Willingness to travel internationally occasionally

 What we offer 

• A global and technically oriented IT security specialist function that works directly with the Head of IT Global
• Clear operational responsibility for defined IT security topics
• No disciplinary or personnel management responsibility
• Participation in the establishment and further development of a global IT security function
• High scope for design in a security-critical and future-oriented field
• Collaboration with international IT teams, engineering, production and management
• Modern security technologies and international projects
• Flat hierarchies and short decision-making paths
• Flexible working conditions and targeted training opportunities
• Coverage of 60% of pension fund contributions
• Additional benefits in the areas of catering, fitness and mobility

Ready for the next step?

Then we look forward to receiving your application via our online tool:  CVdropper™