IT Security & Compliance Program Lead

Your mission Run IT security and compliance as one program across all markets, with milestones per countryTrack the cybersecurity regulation in each market and keep authority registrations currentGive every country managing director a clear, regular view of where they standMaintain the risk register and report to management quarterlyAssess our critical suppliers together with procurement and assess the security terms in their contractsOwn incident reporting as the escalation contact for our managed SOCOwn the security policies and test that key controls workOrganize security training for management and awareness for all employeesProvide the security evidence for tenders and auditsScope and steer external specialists for penetration tests and technical workAct as IT contact for business continuity and crisis managementThis is a senior individual contributor role within our central IT team, offering significant ownership and accountability without direct people management responsibilities. You will collaborate closely with Legal, Data Protection, Procurement, Product Owners, and business leaders across our country organizations. Security Operations, Workplace IT, and Data Protection are managed by dedicated specialist teams and partners. Your profile Five to eight years in information security governance, risk and compliance, ideally in a group with several legal entities or countriesYour career started in IT operations, infrastructure, security operations or IT audit, so you know how systems fail and how controls are bypassed in practiceYou have assessed suppliers beyond the questionnaire: worked through SOC 2 or ISO 27001 evidence, followed up exceptions and judged whether a vendor's answer holds upYou can decide within hours, with incomplete information, whether an incident is reportable and to whomYou have run a compliance program end to end: plan, milestones, status reporting and closure, with senior stakeholders who were not security expertsYou build trust with managing directors. You explain what an obligation means for them, what it costs and what you need, in a few minutes and without jargonHands-on experience implementing NIS2, KRITIS or comparable cybersecurity regulation, ideally across several countriesISO 27001 Lead Implementer or Lead Auditor, or BSI IT-Grundschutz Practitioner. CISM or CISA is welcomeFluent English. German is a strong advantage for working with the BSIBased in Germany, ideally within reach of Essen, with occasional travel to our marketsA plus: experience in energy, OT or IoT environments, or with business continuity Why us? People take centre stage: Become part of a dynamic, ambitious and agile team that develops solutions for the eMobility market and be part of our EDRI events or the next after-work eventWith us, you get the best of both worlds - 100% start-up with the support of a large companyThe freedom you need: We offer you hybrid working with flexible working hoursWorkation: Enjoy the flexibility to work temporarily from abroad – within the EUYou will receive a competitive salary with a performance-related bonusA company pension scheme is of course also one of the benefits with usSustainable learning opportunities: We support you with a training budget of 5,000 euros per yearYou get everything you need to get started: onboarding with welcome gifts and all the hardware you need Contact Diversity counts at E.ON. We welcome all people and are convinced that differences make us stronger. Become part of our inclusive and diverse corporate culture! Seize the opportunity to become part of our E.ON Drive Infrastructure team and not only create prospects for the future of E.ON, but also for your own. We look forward to getting to know you! Laura Junior Recruiter Do you have any questions or difficulties with your application? Please contact me at laura.ackermann@edri.com.