Security Officer (m/f/d)

A company is looking for an experienced Security Officer to assess and improve information security in the passenger transport division. The goal of the project is to ensure an appropriate level of security by evaluating IT projects and services and by further developing information security policies, metrics, and goals.

The Security Officer will prepare decision-making materials and recommendations on information security topics, initiate and support (IT) security audits and penetration tests, and serve as a point of contact for employees and subsidiaries. The role also includes independently conducting business impact, risk, and protection needs analyses.

• Evaluate IT projects and services in terms of protection needs and security measures
• Collaborate on the (further) development of information security policies, metrics, and goals
• Prepare decision-making materials and recommendations for the CISO as well as department/division management
• Initiate and support (IT) security audits, penetration tests, and security reviews
• Serve as a point of contact for employees and subsidiaries
• Assess sensitive permission and exception requests for risks and decide on their implementation
• Conduct business impact, risk, and protection needs analyses as part of information security risk management

• Knowledge of relevant standards, regulations, and laws (e.g., ISO 27000 series, IEC 62443, OWASP, PCI-DSS, GDPR, NISG2026, CRA, RKE-G)
• Experience with tools such as Crisam, Jira/Confluence, Tufin, ServiceNow
• Excellent German language skills, both written and spoken