> Markdown version of [/jobs/ext/2429421-thesis-information-security-all-genders](https://www.wearedevelopers.com/jobs/ext/2429421-thesis-information-security-all-genders). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Thesis Information Security (all genders)

- **Company:** PowerCo SE
- **Location:** Salzgitter, Germany
- **Contract:** Permanent contract
- **Skills:** Cyber Security, IT Management, Tisax, Information Security Management System, Information Technology
- **Published:** August 4, 2026
- **Apply:** https://de.indeed.com/viewjob?jk=7f459d8fed59f373

## About the Role

Enrollment in a Bachelor's program in Business Informatics, Information Security, Cybersecurity, Computer Science, Business Administration, or a related field
Strong analytical and conceptual thinking skills with an interest in governance and regulatory topics
Basic understanding of information security, risk management, compliance, or IT governance
Interest in cybersecurity regulations such as NIS2, the Cyber Resilience Act, ISO 27001, or automotive security standards
Ability to structure complex topics and translate regulatory requirements into practical implementation concepts
Independent, structured, and solution-oriented working style
Strong communication and documentation skills
Fluency in English and German

What makes you stand out

Interest in cybersecurity governance, regulatory compliance, and resilience management
First experience with information security management systems (ISMS), risk management, or audit-related topics
Knowledge of standards and frameworks such as ISO 27001, NIST, TISAX, or automotive cybersecurity requirements
High level of self-motivation, initiative, and willingness to learn
Strong stakeholder management and communication skills

## Description

Theoretical analysis of cybersecurity contingency planning, incident response management, and crisis management frameworks in the context of NIS2, the Cyber Resilience Act (CRA), ISO 27001, and automotive cybersecurity requirements
Identification and evaluation of regulatory and organizational requirements for structured incident response and contingency planning
Analysis of current industry practices and identification of challenges, gaps, and opportunities within cybersecurity governance processes
Development of a methodological framework for designing, implementing, and maintaining cybersecurity contingency and incident response plans
Definition of governance structures, roles and responsibilities, escalation paths, and communication procedures across different stakeholder groups
Development of practical templates, process models, and implementation recommendations supporting regulatory compliance and operational readiness
Documentation of findings, recommendations, and opportunities for organizational scaling and continuous improvement
Supporting operational governance, risk, and compliance activities as required.