Security Senior Specialist

Role Overview

We are looking for a hands-on Senior Security Specialist to lead and oversee key security initiatives across the organization. You will play a central role in strengthening our security posture, driving compliance certifications, and ensuring robust access governance — working closely with the CISO to protect our infrastructure and data assets.

---

Key Responsibilities

• **Identity & Access Management (IAM)**
  - Design, implement, and maintain IAM frameworks, policies, and processes across the organization
  - Oversee access rights management, including provisioning, de-provisioning, and periodic access reviews
  - Lead the rollout and enforcement of Multi-Factor Authentication (MFA) across all systems and user groups
  - Ensure least-privilege principles are consistently applied and audited
• **Network Security**
  - Oversee the implementation and continuous improvement of network security controls
  - Monitor, detect, and respond to security threats and vulnerabilities across the network infrastructure
• **Security Reporting & Audit**
  - Generate regular security reports and dashboards for the CISO and senior management
  - Support internal and external audit processes, ensuring timely and accurate documentation
  - Coordinate and oversee penetration testing engagements, track findings, and drive remediation
• **Compliance & Certification**
  - Lead and coordinate security certification processes (e.g. PCI DSS, ISO 27001) in close collaboration with the CISO
  - Conduct gap analyses, maintain compliance documentation, and liaise with auditors and certification bodies

Requirements

• Bachelor's degree or above in Computer Science, Information Technology, Cybersecurity, or a related field
• 3–5 years of hands-on experience in information security
• Proven track record in security project implementation and management
• Demonstrated experience in IAM, network security, or compliance programs
• Certifications would be a strong plus
  - CISSP, CISM, CISA, or equivalent
  - ISO 27001 Lead Implementer / Lead Auditor
  - PCI DSS QSA or ISA certification
  - IAM-related certifications (e.g. Microsoft Identity, SailPoint, Okta)
• Skills
  - Solid understanding of IAM principles, network security, and regulatory frameworks
  - Strong analytical and independent problem-solving abilities
  - Excellent communication and stakeholder management skills
  - Ability to manage multiple priorities in a fast-paced environment
• Can use German and English as working language