About the Position

IT Security Manager (m/f/d)

For our company headquarters, we are looking for committed and flexible employees (m/f/d) for a permanent position at the earliest possible date.

About the Company

As a leading solution and service provider in the field of payment transactions, EFiS AG has been a successful partner for banks and companies for 40 years. As an international company with headquarters in Dreieich near Frankfurt and more than 80 employees, we continue to pursue a strong growth strategy.

The Position

Working in the Staff Unit IT Security and Compliance of EFiS AG, which reports directly to the Executive Board
Organizationally and procedurally subordinate to the Chief Information Security Officer (CISO)
Maintenance and further development of the company’s information security, taking into account legal, regulatory, and contractual requirements

Responsibilities

Support in maintaining and further developing the ISO 27001–certified Information Security Management System (ISMS)
Monitoring and analysis of security events for the early detection of potential cyberattacks
Analysis of IT security incidents and coordination of their resolution
Identification, assessment, and tracking of vulnerabilities in IT systems
Review and management of user and administrator permissions according to the principle of least privilege
Ensuring the protection of payment systems and transaction data against unauthorized access and manipulation
Reviewing IT systems and applications for compliance with defined security requirements
Identification, assessment, and documentation of IT security risks as well as tracking of appropriate countermeasures
Assessment of the IT security risks of external service providers and cloud providers
Planning, execution, and documentation of emergency and recovery tests for critical IT systems
Preparation and maintenance of security evidence and documentation for internal and external audits
Conducting training and awareness measures
Reporting to customers and responding to customer inquiries related to information security

Requirements

Completed degree or vocational training; career changers with an interest in the subject are also welcome
Additional qualifications such as CISA, CISM, ISO Lead Auditor, ISO Lead Implementer, etc. are ideal
Familiarity with legal and regulatory requirements of the banking/payment services sector (MaRisk, BAIT, SWIFT PSCF, SWIFT CSCF, BSIG)
Experience in conducting IT audits
IT knowledge
Independent working style and personal initiative
Communication with various stakeholders as well as documentation of results in German and English is no problem