Chief Information Security Officer / Ciso

Your Responsibilities

Excellent research needs state-of-the-art IT infrastructure, security operations and innovative digital services. With a team of about 50 experts, we will redesign the institute's digital landscape over the next few years and implement an ambitious transformation program to facilitate the Institute’s rapid growth. The core aim for the newly created role of CISO is to create and maintain a secure environment and culture within the organization, safeguarding critical information and technology, managing cybersecurity risks, and ensuring the organization is prepared to detect, respond to, and recover from cyber incidents. This includes aligning security initiatives with the Institute’s goals, supporting innovation in a secure manner, and fostering security awareness across all levels of the Institute.

• Developing and implementing the Institute’s information security strategy together with key stakeholders to support the Institute’s objectives and ensure the protection of critical data, assets, and systems
• Leading, mentoring and developing a team of cybersecurity professionals
• Establishing, enforcing, and updating security policies and frameworks
• Evaluating and managing cyber and technology risks across the organization, advising senior leadership on risk mitigation and future planning
• Ensuring regulatory compliance by keeping the organization aligned with relevant laws, standards, and sector requirements
• Overseeing incident response and disaster recovery plans to ensure the institute can detect, respond to, and recover from cyber incidents effectively
• Promoting a culture of cybersecurity awareness by leading training and education initiatives for all employees to foster good security practices

Your Profile

• Degree in information security or a similar field and proven experience as senior security officer
• Very good knowledge of information security, particularly standards and regulations such as ISO 2700x, NIS2, NIST, ENISA, ITIL, COBIT etc.
• Certifications in information security, e.g., CISSP, CISA, CISM, or certification as an ‘IS Manager’ are a plus
• Good managerial skills combined with high sense of responsibility and problem-solving skills
• Excellent analytical skills and a structured approach
• Strong interpersonal and communication skills
• Ideally, experience in a research institution and with the requirements of researchers
• Working language is English, proficiency in German is a plus