PpbSwiss AviationSoftware is a 100% subsidiary of Lufthansa Technik, and along with our partners in the Digital Tech Ops Ecosystem, leads the digital transformation of the aviation industry in technical asset operation. Swiss AviationSoftware develops, distributes and runs the critical software package AMOS which manages the maintenance, engineering and logistics requirements of international modern airlines. In order to strengthen our leading market position we are looking for dedicated employees who would like to work in a fascinating international environment with more than 230 customers from all over the world. /b /p pAre you passionate about information security and have the drive to support and guide your colleagues to help protect the company's information and information technology assets? We are looking for an independent, dynamic and pragmatic colleague with solid practical technical experience in information / cyber security who is now looking to enrich their daily work with responsibilities in governance, risk and compliance. Your challenge will be to ensure that the certifications ISO/IEC 27001, SOC1 and SOC2 are being kept in close collaboration with our ISO. We expect the candidate to act as advocate for information security and above all support all colleagues to understand how their area is affected in the context of information security. /p h3Tasks /h3 ul liPartnership with critical teams in terms of infrastructure for audits and assurance subject matters /li liConduct internal audits and assessments to identify gaps and ensure compliance with internal requirements /li liMonitor technical security controls within GCP our Cloud environment and our internal infrastructure /li liOrganize, manage, scope and oversee execution of pentest /li liManage and provide guidance on vulnerabilities, prioritizing them based on technical severity and business impact and further support, including providing technical and operational guidance for remediating identified findings /li liAct as security risk advisor on activities that could affect information security /li liResponsible to manage and provide guidance on security issues and findings as part of the customer support inquiries /li liSupport with Incident Management /li /ul h3Skills /h3 ul liMaster degree in computer science /li liIndustry recognized security qualifications such as CISSP (or equivalent) etc. (CISSP or equivalent of advantage) /li liSound knowledge and experience with ISO/IEC 27001, SOC 1 and or SOC2 compliance requirements certifications /li liProven track record of contributing to or implementing previous ISMSimplementations, ideally aligned with ISO/IEC 27001. /li liAt least 5 years of experience in a position similar to the described one /li liExcellent understanding and practical experience in all aspects of information security and IT security /li liVery strong communication skills and expert in building connections. /li liAbility and comfort in interacting with colleagues at all levels /li liHigh level of integrity /li /ul h3What we offer /h3 ul lipWorking in an open and cooperative environment with a motivated and friendly team /p /li lipFlexible working hours (flex time model) /p /li lipHybrid work model /p /li lipFlight and travel discount /p /li lipExcellent working conditions in pleasant surroundings /p /li lipGood professional and personal development opportunities /p /li lipHighly appealing pension fund scheme/retirement savings plan /p /li lipAn international work environment with people from around the globe /p /li /ul /p #J-18808-Ljbffr