(Junior) Information Security Manager - IT Security

Company Description

Job Description

We are looking for a (Junior) Information Security Manager to join our IT-Security team (Hamburg/remote Germany). In this role you will help with the governance and compliance side of securing our online shop and B2B platforms ultimately ensuring a safe shopping experience for our customers and a secure work environment for the employees.

Our security team ensures that visitors of our online shop have a safe shopping experience and their personal data is secure with us. In addition the team also protects our corporate data and the equipment of our employees.

What will you do

• Conduct risk analyses and assist in the implementation of compliance initiatives.

• Collaborate on data preparation for internal and external IT audits.

• Develop and implement processes in collaboration with the legal department and IT teams particularly in response to new data protection regulations (e.g. GDPR).

• Oversee and continuously improve our Information Security Management System (ISMS).

• Create and enforce guidelines and process documentation with internal and external stakeholders such as those related to access management and data deletion protocols.

• Work closely with executive management the legal department and the external data protection officer.

• Participate in agile projects within a motivated international and dynamic security team.

Who you are

• Deep understanding of general data protection legislation e.g. DSGVO and information security standards and frameworks such as ISO 27001 (ISMS) / CIS18 / NIST PCI DSS COBIT ITIL etc.

• Strong understanding of IT-security risk frameworks such as ISO 27005 or BSI 200-3 including how to identify and measure and control risks within an organization

• At least 1 year of experience in information security management.

• Active participation in at least one GRC audit.

• Strong understanding of risk management principles and methods for risk-based prioritization.

• Analytical mindset with a structured approach to problem-solving and implementing security solutions.

• Project management and stakeholder skills capable of encouraging other departments and colleagues to adopt security best practices and methods

• Fluent in written and spoken English.

Nice to have:

• High-level knowledge of one of the major cloud computing providers: AWS GCP Azure

• Experience in at least one coding language (e.g. Python PHP Go Bash...).

• Hands-on experience with incident response processes

• Experience within the e-commerce sector

Benefits

• Grow together with one of the fastest growing eCommerce companies in Europe

• Flexible working times (10 AM - 16 PM German Time Zone as core working-time)

• 40% discount on our online shop

• Fresh fruits + drinks everywhere

• Language courses (German & English)

• Free sports courses & reduced price for gym membership

• Subsidized public transportation ticket

• Free choice of hardware and operating system (Mac Windows Linux) also for private usage

• State-of-the-art tech stack running on AWS

• Modern office in the city center of Hamburgs

• International working environment and English as company language

• Company flats (subject to availability)

• Agile work environment (MOVE) and cross-functional teams

• Free access to Germany’s greatest developer conference code.talks

• Company pension scheme

• Free access to online learning platforms like Laracast Egghead and A Cloud Guru

• Help in relocation and VISA process

YOU ARE THE CORE OF ABOUT YOU . We take responsibility for creating an inclusive and exceptional environment where all genders nationalities and ethnicities feel welcomed and accepted exactly as they are. We believe that a diverse workforce essentially contributes to the ABOUT YOU culture. In order to maintain talent and diversity we emphasize the care for physical health mental health and overall well-being. Our values and work ethics essentially contribute to our brand mission: empower acceptance and shape an inclusive fair and circular fashion culture. We are looking forward to receiving your application – preferably via our online application portal! Thus we can ensure a faster process and for you it is very easy to upload your application documents.