IT Security Manager (m/f/d)

Who we are

As a leading solution and service provider in the field of payment transactions, EFiS AG has been a successful partner for banks and companies for 40 years. As an international company with headquarters in Dreieich near Frankfurt and more than 80 employees, we continue to pursue a strong growth strategy.

The position

• Working in the Staff Unit IT Security and Compliance of EFiS AG, which reports directly to the Executive Board
• Organizationally and procedurally subordinate to the Chief Information Security Officer (CISO)
• Maintenance and further development of the company’s information security, taking into account legal, regulatory, and contractual requirements

Your responsibilities

• Support in maintaining and further developing the ISO 27001–certified Information Security Management System (ISMS)
• Monitoring and analysis of security events for the early detection of potential cyberattacks
• Analysis of IT security incidents and coordination of their resolution
• Identification, assessment, and tracking of vulnerabilities in IT systems
• Review and management of user and administrator permissions according to the principle of least privilege
• Ensuring the protection of payment systems and transaction data against unauthorized access and manipulation
• Reviewing IT systems and applications for compliance with defined security requirements
• Identification, assessment, and documentation of IT security risks as well as tracking of appropriate countermeasures
• Assessment of the IT security risks of external service providers and cloud providers
• Planning, execution, and documentation of emergency and recovery tests for critical IT systems
• Preparation and maintenance of security evidence and documentation for internal and external audits
• Conducting training and awareness measures
• Reporting to customers and responding to customer inquiries related to information security

What we expect from you

• Completed degree or vocational training; career changers with an interest in the subject are also welcome
• Additional qualifications such as CISA, CISM, ISO Lead Auditor, ISO Lead Implementer, etc. are ideal
• Familiarity with legal and regulatory requirements of the banking/payment services sector (MaRisk, BAIT, SWIFT PSCF, SWIFT CSCF, BSIG)
• Experience in conducting IT audits
• IT knowledge
• Independent working style and personal initiative
• Communication with various stakeholders as well as documentation of results in German and English is no problem