Business Information Security Officer (m/f/d)

Tasks you will enjoy

• Together with international stakeholders, you implement the cybersecurity strategy as well as the Group's security policies and minimum requirements into practical guidelines for Valora.
• You identify, assess and document cybersecurity risks. In addition, you support the departments in planning and implementing appropriate risk mitigation measures.
• As the central contact for information security, you support projects, transformation initiatives and architectural undertakings and ensure that security requirements are considered at an early stage.
• You keep an eye on compliance with security policies, standards and controls and accompany audits as well as regulatory requirements in the area of data protection and information security.
• In the event of security incidents, you coordinate local activities, support the analysis and work closely with internal and international security teams.
• Furthermore, you develop and maintain the information security and governance framework for Valora and drive its continuous development forward.
• Regular analyses and reports on security risks, maturity levels, key figures and improvement measures are also part of your responsibilities.
• With training, awareness measures and targeted communication, you strengthen security awareness and promote a sustainable security culture within the organisation.

Requirements you bring

• Several years of professional experience in information security and IT risk management, ideally in a leadership role such as CISO, Deputy CISO or BISO.
• A degree in computer science, information systems, cyber security, engineering or a comparable field.
• Sound knowledge in the areas of cybersecurity governance, risk management, security architecture as well as cloud and identity security, preferably in the Microsoft environment.
• Experience with common security standards and frameworks such as ISO 27001, NIST CSF, CIS Controls or MITRE ATT&CK.
• Recognised security certifications such as CISSP, CISM, CISA, CRISC or ISO 27001 Lead Implementer/Auditor are an advantage.
• Analytical thinking, high initiative and the ability to communicate complex matters clearly.
• Very good German and English skills, both spoken and written.

Benefits we offer you

• A dynamic, international working environment with plenty of room for ideas and active participation.
• Various development and training opportunities, including through our internal Valora Academy and live training sessions.
• A straightforward corporate culture with direct exchange and a lived informal culture that promotes innovation and agility.
• Exciting projects and varied tasks with great scope for design and high personal responsibility.
• Attractive employee discounts at Valora formats and selected partners in the areas of leisure, sport, health and mobility.
• Attractive employment conditions with a company pension scheme and three flexibly selectable savings plans.
• Flexible working hours with flexitime and the possibility to work from home.