Security Senior Specialist

Role Overview

We are looking for a hands-on Senior Security Specialist to lead and oversee key security initiatives across the organization. You will play a central role in strengthening our security posture, driving compliance certifications, and ensuring robust access governance — working closely with the CISO to protect our infrastructure and data assets.

—

Key Responsibilities

• **Identity & Access Management (IAM)**
  – Design, implement, and maintain IAM frameworks, policies, and processes across the organization
  – Oversee access rights management, including provisioning, de-provisioning, and periodic access reviews
  – Lead the rollout and enforcement of Multi-Factor Authentication (MFA) across all systems and user groups
  – Ensure least-privilege principles are consistently applied and audited
• **Network Security**
  – Oversee the implementation and continuous improvement of network security controls
  – Monitor, detect, and respond to security threats and vulnerabilities across the network infrastructure
• **Security Reporting & Audit**
  – Generate regular security reports and dashboards for the CISO and senior management
  – Support internal and external audit processes, ensuring timely and accurate documentation
  – Coordinate and oversee penetration testing engagements, track findings, and drive remediation
• **Compliance & Certification**
  – Lead and coordinate security certification processes (e.g. PCI DSS, ISO 27001) in close collaboration with the CISO
  – Conduct gap analyses, maintain compliance documentation, and liaise with auditors and certification bodies

Requirements

• Bachelor’s degree or above in Computer Science, Information Technology, Cybersecurity, or a related field
• 3–5 years of hands-on experience in information security
• Proven track record in security project implementation and management
• Demonstrated experience in IAM, network security, or compliance programs
• Certifications would be a strong plus
  – CISSP, CISM, CISA, or equivalent
  – ISO 27001 Lead Implementer / Lead Auditor
  – PCI DSS QSA or ISA certification
  – IAM-related certifications (e.g. Microsoft Identity, SailPoint, Okta)
• Skills
  – Solid understanding of IAM principles, network security, and regulatory frameworks
  – Strong analytical and independent problem-solving abilities
  – Excellent communication and stakeholder management skills
  – Ability to manage multiple priorities in a fast-paced environment
• Can use German and English as working language