Information Security Officer

Your job What it's all about: You enable the global Information Security and Data Protection organisation, promote the further development of an ISMS and DPMS and strive to bring the latest state of the art developments in Cyber Security into the DNA of the company.

As part of our Information Security and Data Protection Team, you will play a crucial role by implementing an ISMS and DPMS, establishing NIS 2 compliance, process integration and establishing group-wide Information Security. This position is based in Dornbirn/Remote and is a great opportunity for a ‘Cyber Security Enthusiast’ to shape the future of Information Security at the Zumtobel Group!

Your responsibilities

• Information Security and Data Protection Support: Assist the CISO in developing and implementing strategies, policies, and procedures for information security and data protection, acting as a central contact for related queries.
• ISMS and NIS2: Support the setup of a group-wide ISMS, ensuring compliance with the NIS2 Directive.
• Continuous Improvement: Define KPIs and measures for ISMS improvement, coordinating with the team and CISO.
• Cyber Security Regulations: Stay updated on cyber security regulations, assisting with implementing legal requirements.
• IT-Security and Audits: Evaluate security requests, collaborate with IT security operations, and plan/support internal and external audits. Additionally, create presentations and training for awareness.

Your profile

• Educational Background and Professional Experience: Completed education in IT or information security and over 6 years of relevant experience.
• Expertise in Data Protection and Information Security: In-depth knowledge of security technologies and standards (e.g., ISO 27001, NIST) and experience in ISMS and DPMS implementation and operation.
• Management Systems and Project Management: Strong understanding of management systems and project/process management, with experience in risk assessments and reporting.
• Certifications and Continuous Learning: Ideally certified (e.g., CISM, CISSP) with a commitment to ongoing training.
• Knowledge of Regulations: Familiarity with NIS2, GDPR, AI Act, and other relevant laws.
• Communication and Training Skills: Skilled in reporting to C-level managers, training team members, and handling conflicts with excellent communication and assertiveness.
• Technical and Language Proficiency: Proficient in MS Office, able to manage multiple projects, and fluent in English and German.

The Zumtobel Group: a company with many benefits

• Successful, international group with family DNA.
• Varied field of activity with personal responsibility.
• Numerous opportunities for further development in an innovative and empowering company.
• Great team that will support you in any situation.
• Individual options to ensure a healthy work-life balance.
• Extensive benefits for our employees

Learn more about our corporate company culture in our enlightening video - where we live light and thrive together!

Does that sound like a challenging task for you?
Then we look forward to receiving your application!

Legally binding notice: Based on the minimum salary stipulated in the collective agreement of € 59.015,46 p.a. (for a 38,50-hour working week), the actual salary for this position is based on professional qualifications and experience.

At the Zumtobel Group, we not only understand the power of the visible, but also the invisible. Like light itself, diversity cannot be grasped but it can be perceived. We appreciate the uniqueness of each individual and recognize it as a driver of innovation. Qualified applicants will receive consideration without regard to e.g.: race, color, sex, religion, age, sexual orientation, gender identity/expression, or disability.