Information Security Specialist (Junior or Senior) | Data Engineer
Hypo Tirol Bank AG
Job Summary
This role involves joining the IT Governance Team, focusing specifically on IT security and managing security-related projects. The specialist will be responsible for the operation and further development of the Hypo Tirol Information Security Management System (ISMS). Key daily tasks include collaborating closely with the Chief Information Security Officer (CISO), developing and implementing security policies based on stringent regulatory requirements such as DORA, EBA, NIS, and ISO standards. The position requires analyzing and assessing security-relevant risks, managing security projects, and planning and executing training and awareness initiatives. Furthermore, the specialist will prepare structured reports on the security posture for steering committees and provide crucial support during internal and external audits. This position is attractive due to the offer of comprehensive mentorship, extensive internal and external training opportunities, and a secure, future-oriented working environment within a traditional banking institution.
Required Skills
Education
Completed university degree in a relevant subject area such as Computer Science or Cybersecurity, or comparable qualification through professional practice.
Experience
- Long-term professional experience in the field of Information or IT Security is highly desired, ideally a minimum of five years, demonstrating deep competence in security operations and compliance.
- Extensive knowledge of banking regulatory frameworks and relevant norms, including DORA and EBA-Guidelines, is required to ensure compliance and policy effectiveness.
- At least three years of practical experience in Risk Management, specifically focusing on the analysis and assessment of security-relevant risks.
- A minimum of three years of practical experience in Continuous Improvement Work (KVP) methodologies to enhance security processes and systems over time.
Languages
Additional
- Not specified