Software Architect

https://infrastruktur.oebb.at/ Wien-Leopoldstadt, Wien 1020 Standard working hours, flexible working hours 38.5 hours req25354

Your job, you...

• implement measures to ensure the integrity, confidentiality, and availability of information based on analyses and specifications, and you actively further develop the information security level in your area of responsibility.
• plan, implement, and operate the Information Security Management Systems (ISMS) for internal partners and accompany their further development.
• evaluate IT projects, services, applications, architectures, configurations, authorization requirements, and security-relevant processes with regard to protection requirements, risks, compliance, and necessary security measures.
• create reports, decision-making bases, and recommendations for action regarding threats, measures, residual risks, and required information security measures for decision-makers and management.
• develop concepts, guidelines, training materials, and training sessions, thereby supporting the sustainable anchoring of information security in the organization.
• plan, initiate, conduct, and accompany internal and external audits, security assessments, as well as penetration tests in close coordination with relevant stakeholders.
• support the handling of security incidents and lead or accompany projects or work packages with a focus on information security.
• are the central point of contact for information security in the supervised areas, participate in coordination and decision-making platforms, and support or represent the CISO in relevant committees if necessary.

Your profile, you...

• possess sound knowledge in the field of information security and in the operation or further development of an ISMS - ideally based on a completed technical university degree or equivalent professional experience.
• bring several years of relevant professional experience in comparable functions, such as in Information Security Management, IT Security, IT Operations, or the audit environment.
• are familiar with the relevant norms, standards, and regulatory requirements and move confidently in their application, particularly in the ISO/IEC 27000 series (including ISO/IEC 27001:2022 and ISO/IEC 27002:2022), the IEC 62443 series, in the BSI IT-Grundschutz (especially BSI standards 200-1 to 200-3), in the DSGVO, in the NIS-2 directive or the Austrian NISG 2026, as well as in relevant auditing standards such as ISAE 3402.
• ideally possess certifications in the field of information security, e.g., CISA, CISM, or CISSP.
• work analytically, structured, and independently, appear confident and solution-oriented, and know how to build trust and acceptance with different contact persons.
• have strong communication skills in technical and professional terms, are confident in moderation, are team-oriented, and take responsibility even in complex projects.
• also possess good English skills in speaking and writing.

Our offer

• We offer flexible working hours, home office, and provide a nanny service such as a nearby company kindergarten for this purpose.

• For the function "Expert Information Security Management" (according to the collective agreement for railway companies), a minimum salary of € 60,150.16 gross/year is provided. Depending on qualifications and professional experience, overpayment is possible, whereby an All-In agreement including the possibility of flexible working hours is provided for this position.

Application link: https://oebb.csod.com/ux/ats/careersite/4/home?c=oebb Search field: req25354