Job
- Level
- Erfahren
- Job Feld
- IT, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
- Ort
- Mülheim-Kärlich
- Arbeitsmodell
- Hybrid, Onsite
Job Zusammenfassung
In dieser Position entwickelst du Sicherheitsrichtlinien, führst Risikoanalysen durch und unterstützt die Einhaltung von Standards wie ISO/IEC 27001, während du die Sicherheitsprozesse in IT, OT und Produktumgebungen koordinierst.
Deine Rolle im Team
- The Information Security Manager is responsible for establishing, coordinating, and maintaining all information security-related activities within the division.
- The role ensures compliance with relevant security standards and regulatory requirements (e.g. NIS2, ISO/IEC 27001, Cyber Resilience Act), supports secure processes across IT, OT, and product environments, and aligns divisional practices with Group Security Strategy.
- The position acts as the divisional subject-matter expert and single point of contact for security, operating independently and cross-functionally.
- Define and maintain division-specific security policies, standards, and procedures; perform risk assessments; manage the security risk register; and support correct information classification and protection.
- Lead divisional readiness for NIS2 and ISO/IEC 27001, coordinate audits and documentation, and support product-related cybersecurity requirements in line with the Cyber Resilience Act; maintain a regulatory dotted-line reporting relationship to the EVP to ensure transparency and escalation on compliance-relevant matters.
- Serve as divisional coordinator for security incidents and align with Group processes, including vulnerability management and remediation tracking.
- Conduct supplier security assessments, ensure contractual requirements are met, and follow up on deviations and corrective actions.
- Coordinate mandatory security awareness activities and enable role-based security competence across relevant teams.
- Advise ISM, R&D, Operations, and other functions on necessary security requirements, ensuring their integration into projects, products, systems, and processes.
- Define, monitor, and continuously improve security-relevant governance and compliance processes; act as senior escalation authority for internal and external audits; prepare regular reports on security status, risks, and KPIs for divisional management; and ensure close alignment with Group Security and other divisions.
Unsere Erwartungen an dich
Ausbildung
- University degree in Information Security, Computer Science or comparable qualification.
- High degree of integrity, confidentiality, and resilience.
Qualifikationen
- Strong communication and facilitation skills paired with a structured, independent working style.
- Able to operate independently and reliably as a 'one-person function' while coordinating cross-functional stakeholders.
- Strong communication skills with the ability to translate complex security topics into actionable guidance.
- Very good English skills; German is beneficial.
Erfahrung
- Several years of experience in information security, cybersecurity, or risk management.
- Experience with ISO/IEC 27001, NIS2 implementation, incident response, and supplier/security governance.
- Experience in industrial or product-oriented environments (IT/OT) is an advantage.
Unser Angebot
- 30 days of annual leave.
- Subsidized company pension plan.
- Subsidized group accident insurance.
- Hybrid working model.
- Flexible working hours.
- Opportunity to purchase TOMRA shares at a discounted rate.
- Employee discounts for various online shops via Corporate Benefits.
- Company (e-)bike leasing.
- Subsidy for gym memberships.
- Employee Resource Groups (ERGs) for Women, LGBTQ, and Roots.
- Health management programs.
- On-site canteen and parking garage.
Benefits
Work-Life-Integration
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
Tomra Sorting GmbH
TOMRA wurde 1972 mit einer Innovation gegründet, die mit dem Design, der Herstellung und dem Verkauf von Rücknahmestellen (RVMs) für die automatische Sammlung von Getränkebehältern begann.
Description
- Unternehmenstyp
- Etablierte Firma
- Arbeitsmodell
- Hybrid, Onsite
- Branche
- Industrie, Produktion, Energiewirtschaft, Umwelt
Information Security Manager
- Ort
- Mülheim-Kärlich
- Arbeitsmodell
- Hybrid, Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
