Platform Security Architect (m/f/d), Hirschau (IT Security Coordinator)

Our Formula for Success

As a reliable partner, we make the procurement of technical requirements for our customers as simple and efficient as possible. To achieve this, we work every day with passion and ingenuity. We offer a high-quality range with millions of technical products, customer-centric solutions and services, as well as expert support from person to person. We drive this mission forward with passion, see change as an opportunity, and deliver everything to our customers that leads their projects to success. As a family business, we place the greatest importance on sustainable economic practices and long-term relationships. We stand for quality and reliability.

You are the operational and strategic mind behind our secure architecture landscape. As a Platform Security Architect (m/f/d), you are the most important security expert for our infrastructure and development teams. In addition to your daily operational tasks, you will focus on building security governance, securing our cloud-native environments, and promoting our ISO 27001 compliance and the maturity of our Zero Trust approach. You act as a link between development, operations, and compliance.

Your Contribution to Success

Security Governance & Compliance: You will take the lead in adapting our technical infrastructure to ISO 27001 standards. You define, maintain, and implement security policies and procedures company-wide.

Security Architecture & CNAPP: You design and optimize the architecture for our cloud-native environments, with a particular focus on managing CNAPP solutions and workflows to ensure end-to-end transparency and protection.

Integration of Secure SDLC (SSDLC): You work together with the development teams and integrate the security aspect into the development lifecycle to ensure that threat modeling and vulnerability management are seamlessly integrated into our technologies and processes.

Cross-functional Collaboration: As a central point of contact for our development and infrastructure teams, you train them in "Secure-by-Design" principles and help them balance the speed of feature development with robust security controls.

Risk and Vulnerability Management: You introduce proactive processes for vulnerability management, prioritize risks based on their business relevance, and ensure that remediation measures are tracked and effectively implemented.

Your Success Factors

Education and Experience: A university degree in the fields of (IT) security, computer science, or a related field.

Security Expertise: Sound knowledge in the field of cloud-native security, including CNAPP tools, container security, and securing Infrastructure-as-Code. At least 10 years of experience in software development, including at least 5 years in a key role with security responsibility in an organization with more than 5 development teams.

Methodological Skills: Proven experience in applying and auditing frameworks such as ISO 27001. You understand the PDCA cycle (Plan-Do-Check-Act) and know how to translate control measures into actionable technical tasks.

Communication and Commitment: You can translate complex security requirements into simple, actionable guidelines for teams outside the security area. You possess the persistence to drive change and the empathy to foster a "Security-by-Default" culture.

Technical Understanding: You have a strong understanding of modern threat scenarios and defense mechanisms in hybrid environments (e.g., OWASP Top 10, Zero Trust principles).

Architectural Expertise: You have sound knowledge in the areas of software architecture and system design and successfully apply common architectural patterns.

Certifications: Ideally, you hold certifications such as CISSP, CISM, or certifications in the field of cloud-native security (e.g., CCSP, Azure/GCP security architecture certifications).

Languages: You have very good English skills (C1); German skills are an advantage.

Your Benefits

We are a Great Place to Work Conrad offers you the optimal opportunity to actively participate in the future of the company and develop yourself in the process through an open and empathetic working environment. For this unique corporate culture, we have been awarded by the Great Place to Work Institute.

Time for Life Through flexible working time models, hybrid working, and special leave, you have the opportunity to design your daily work routine individually according to your needs. Your children are also important to us: At our central location in Hirschau, our "Conrad Kids" are lovingly cared for in our company daycare center.

Communication at Eye Level We are a family business, so a familial atmosphere is particularly important to us. The "Du" culture (informal address) is not just communicated here, but is actually lived, as are the flat hierarchies.

We l(i)ve Healthy That's why we offer you a variety of services related to health prevention. A particular focus is on regular health checks and preventive examinations. For those interested in sports, we also offer the opportunity at the Hirschau location to work out in our Conrad sports club with various sports, courses, or on our company tennis courts. A healthy lifestyle also naturally includes a balanced diet. Therefore, in our canteens (Hirschau/Wernberg), we place particular emphasis on regionality and freshly prepared meals.

At Conrad Electronic, we actively promote the diversity and equality of all employees. Our positions are open to all qualified applicants, regardless of their gender, nationality, ethnic or social origin, religion or belief, disability, age, or sexual identity.

Your Contact Person