Information Security Officer | IT-Sicherheitsbeauftragte:r (m/w/d), EG 13 TV-H

Universität Kassel

Kassel, Hessen, Hessen, Deutschland
Published Dec 21, 2025
Full-time
Permanent

Job Summary

This critical, permanent, full-time role involves actively shaping and managing information security within the complex digital environment of the University of Kassel. The Information Security Officer is responsible for building, continuously developing, and managing the implementation of the university-wide Information Security Management System (ISMS), specifically based on the BSI IT-Grundschutz standard. Day-to-day activities include advising university management on strategic and operational security issues, participating in the Information Security Crisis Team to handle security-relevant incidents, and developing comprehensive security policies, concepts, and emergency plans. You will coordinate the implementation of security measures across all organizational units, manage vulnerability assessments in collaboration with the IT Service Center, and foster a robust security culture through targeted training and risk analyses. Successful candidates must hold a relevant university degree (e.g., Computer Science or IT Security), possess several years of practical experience in information security or IT compliance, and demonstrate excellent knowledge of relevant standards and strong communication and consulting competencies. Good German language skills (at least B2 level) are mandatory for this position.

Required Skills

Education

University degree (e.g., Computer Science, IT Security, Business Informatics) or equivalent qualification. Relevant IT security certifications are advantageous.

Experience

  • Several years of practical experience in information security or IT compliance
  • Experience in larger organizations or public institutions (ideal)
  • Experience in building or operating an ISMS (advantageous)

Languages

German (Fluent)

Additional

  • Ability to combine technical, organizational, and legal aspects of information security. Must be able to work full-time (40 hours per week). Position is permanent (unbefristet).