Information Security Professional in Oberkochen bei ZEISS Group

Your Role:

The InfoSec Certifications and Governance team is responsible for developing, implementing, and maintaining the ZEISS Information Security Program within the ZEISS Information Security Organization. The ZEISS Information Security Program is aligned with well-known international frameworks and standards and considers requirements from all business functions across the ZEISS group as well as regulatory requirements.

Furthermore, the team’s responsibilities include Governance, Risk and Compliance Management, Information Security Audit Management, and ISMS operation.

• support development and review information security policies, procedures, guidelines, forms and templates together with the related Subject Matter Experts.
• support development of measures to ensure compliance with ISO 27001 as well as other applicable information security requirements and frameworks.
• support execution of Information Security Risk Assessments and Analysis to make sure appropriate measures are taken in order to treat identified Information Security Risks appropriately.
• further develop and implement Information Security Auditing across all ZEISS legal entities and locations together with the responsible Regional and Business Information Security Officers.
• support communication of all matters relating to the ZEISS Information Security Program into all Businesses and Regions.
• further develop the ZEISS GRC tool.
• shape the Information Security posture of ZEISS globally and in a sustainable way with the ability to bring your ideas to life.
• be part of a dynamic and motivated team with a passion for Information Security consisting of people of all different experience levels and personalities.

Your Profile: