Information Security Manager (m/f/d)

Who we are

As a leading solution and service provider in the field of payment transactions, EFiS AG has been a successful partner for banks and companies for 40 years. As an international company with headquarters in Dreieich near Frankfurt and more than 80 employees, we continue to pursue a strong growth strategy.

The position

• Working in the Staff Unit Security and Compliance of EFiS AG, which reports directly to the Executive Board
• Organizationally and procedurally subordinate to the Chief Information Security Officer (CISO)
• Maintenance and further development of the company’s information security, taking into account legal, regulatory, and contractual requirements

Your responsibilities

• Support in maintaining and further developing the ISO 27001–certified Information Security Management System (ISMS)
• Support in maintaining and further developing the internal control system (ICS) (IDW PS 951 / ISAE 3402)
• Participation in information security risk management
• Preparation, execution, and follow-up of audits
• Derivation and implementation of corrective measures, including communication with the relevant departments
• Analysis and follow-up of information security incidents
• Support of Business Continuity Management and assistance in creating customer-specific business contingency and continuity plans
• Conducting training and awareness measures
• Reporting to customers
• Responding to customer inquiries related to information security

What we expect from you

• Completed degree or vocational training; career changers with an interest in the subject are also welcome
• Additional qualifications such as CISA, CISM, ISO Lead Auditor, ISO Lead Implementer, etc. are an advantage
• Familiarity with legal and regulatory requirements of the banking/payment services sector (MaRisk, BAIT, SWIFT PSCF, SWIFT CSCF, BSIG)
• Experience in conducting (IT) audits
• IT knowledge is an advantage
• Independent working style and personal initiative
• Communication with various stakeholders as well as documentation of results in German and English is no problem