Information Security Officer

• Overall strategic responsibility for the establishment, implementation and ongoing development of the Information Security Management System (ISMS) in accordance with ISO/IEC 27001 and other contractual and regulatory requirements (e.g. NIS2, GDPR).
• Key point of contact for senior management and the OHB Group on all matters relating to information security; advisory role in security-related decisions and investments.
• Risk assessment and management: identification, analysis and assessment of information security risks, as well as the development of risk mitigation measures at corporate and system level.
• Design and oversight of information security: Responsibility for policies, processes and measures to maintain and continuously improve the level of security.
• Development and management of incident response processes: Definition and implementation of procedures for the detection, root cause analysis, assessment and handling of security incidents to prevent recurrence, in collaboration with IT.
• Conducting and supporting audits, training and awareness-raising initiatives to establish a sustainable security culture throughout the organisation and to ensure compliance with policies and certification requirements.
• Project management and coordination of ISO 27001 certification, including audit preparation, follow-up on corrective actions and reporting.
• Close collaboration with IT, Quality Management and Data Protection, whilst maintaining a functionally independent role reporting directly to the management.
• Drafting of security policies and guidelines, as well as regular reporting to the management on the status of information security and existing risks.

• A university degree in IT or a related field, as well as many years of relevant professional experience in information security, IT governance or IT risk management, ideally in regulated or security-critical sectors
• In-depth knowledge of the relevant standards and frameworks (e.g. ISO/IEC 27001, BSI IT-Grundschutz, NIS2, GDPR)
• Certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor or IT Security Officer are desirable
• Experience in the design and implementation of management systems (ISMS) as well as in conducting audits and risk analyses. Industry-specific expertise in the aerospace sector, particularly regarding safety-related requirements, compliance and supply chain security.
• Very good written and spoken German and English

Pulled from the full job description

• Free parking
• Flexible schedule, Mobile working (according to the area of responsibility) Flexible working hours and flexitime account Attractive payment according to IG Metall collective agreement 35-hour week, 30 days annual leave and special leave days Subject-specific training courses In-house canteen Employee parking spaces Employee recommendation system Benefits of a global group of companies combined with a familiar working atmosphere

We - MT Aerospace - are part of the OHB Space and Technology Group. As a leading international aerospace company, we develop, manufacture and test essential components for launcher programs such as Ariane, the U.S. Space Launch System (SLS) as well as commercial launcher systems, the Airbus fleet, spacecrafts, satellites and defense applications. Thanks to globally unique manufacturing technologies, we create high-performance products made of metal and fiber composites, such as large load-bearing structures and cryotanks, lightweight structures and fuel as well as pressure tanks that combine maximum performance with minimum weight. Especially our business areas of additive manufacturing, CFRP and hydrogen mobility make us a sought-after partner outside the aerospace sector as well. We currently employ around 600 people at our headquarter in Augsburg and at the launch site in Kourou (French Guiana).