BISO

My client are an industry leading global organisation within the automotive sector and are looking for a BISO to join their International CISO Group.

The position will act as the primary point of contact for Cyber Security, Assurance, and Privacy across Germany.

Responsibilities

* Act as the primary local Cyber security, assurance, and privacy contact / adviser for the IT leadership and the IT Business Partners.

* Partner with local Compliance, Legal, IT resources to achieve effective working relationships that can further the effectiveness of the Cyber Security and Privacy program.

* Implement the Information Security and Privacy Policies and Standards across the assigned region.

* Communicate, oversee and carryout technical implementations of security and privacy solutions required to meet business objectives.

* Represent our Security program externally to clients and customers.

* Participate in region/business unit related conferences, client facing engagement, industry forums to represent the Cyber Security and Privacy program. This may require some overnight stays or time away from home, scheduled in advance.

* Provide regular and timely reporting on the status of cyber security and privacy across the region/business unit

* Assist on the implementation, training, and translation of information security policies.

Qualifications

* Hold at least one Information Security certification such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM)

* Hold at least one Data Protection and/or Privacy certification such as Certified Risk and Information Systems Control (CRISC), Certified Information Privacy Technologist (CIPT) or Certified Information Privacy Professional (CIPP), which is preferred.

Knowledge

* Subject matter expert in legislation and regulations that impact information security and privacy (GDPR, Freedom of Information, etc)

* Solid comprehension of security and privacy best practices and compliance frameworks and regulations (ISO, NIST, SOX, GDPR, PCI DSS, SOC)

* Ability to communicate clearly and effectively with both technology/development business partners and stakeholders.

How to Apply

• Submit your CV here.
• A detailed JD is available upon request.