What you will enjoy doingEvery day, our people need to understand why security matters – and when IT fails, ALPLA needs to be ready. As Information Security Expert, you make both happen. You own our security awareness and our IT Emergency Organisation (ITEO), assess information security risks across IT and OT, lead streams within our information security programme TRUST and prepare the evidence for our Cyber-assessments. You report to the CISO and work closely with colleagues in business, IT and OT across our regions and plants.At the core:Take ownership of Security Awareness at ALPLA and drive trainings, phishing simulations and communication campaigns that foster a strong security cultureLead and continuously improve ALPLA's IT Emergency Organisation (ITEO), including processes, roles, documentation and exercisesConduct information security risk assessments in IT and support security assessments in OT environments together with subject matter expertsLead and coordinate workstreams within our global Information Security programme TRUSTCollaborate with stakeholders across Business, IT and OT to advance ALPLA's security maturitySupport compliance with security standards and regulatory requirements such as ISO 27001 and NIS2Prepare documentation and evidence for audits, cyber security assessments and compliance reviewsYou own your topics end to end, including the budget for Awareness and the ITEO, and keep the CISO informed on status and KPIs. The overall ISMS, external audits and reporting to management stay with the CISO, so you can concentrate on your topics.What makes you greatYou take over security awareness and the ITEO from day one. Risk assessments, audit support and your TRUST streams follow step by step over your first year, with coaching from experienced colleagues in the team.What you bringAt least two years of experience in information security or security-related IT, for example identity and access management, incident response or security operationsA degree in a technical, scientific or business field, or a comparable qualificationExperience with service ownership, incident response or emergency managementA knack for communication: you explain security clearly to very different audiences, in English and GermanGood knowledge of information security management systems and frameworks such as NIS2, ISO 27001 and NIST, and an understanding of how security works in both IT and OTExperience in project or programme workA structured, independent way of working: together we set priorities, you take ownership and see things throughNice to haveFirst experience with risk assessments or auditsExperience in an industrial companyCertifications such as ISO 27001 Lead Implementer or Lead Auditor, CISM, CISA or CISSPWhat you can expect working with usIndividual development: We support your certifications, for example ISO 27001 Lead Implementer or Lead Auditor, and further trainingShape and further develop ALPLA's global Security programme and IT Emergency OrganisationInternational footprint: You work with regions and plants around the world, across business, IT and OTRoom to grow: A clear path towards a senior governance, risk and compliance roleSpace for your own education: Flexible working hours, study days and contribution to further education, by individual agreementShort lines: You report directly to the CISOAttractive employee discounts, health initiatives and sports activities, including access to the ALPLA GymLegally mandatory note: In line with the minimum salary stipulated in the collective agreement, the actual salary for this position is based on professional qualifications and experience.ContactAlpla Werke Alwin Lehner GmbH & Co KGmr Marco Moosmann, Human ResourcesAllmendstraße 816971 Corporate HQ, Hard+4355746021199