Senior IT Security Consultant
Summary
Act as an in-house security advisor, embedding IT security across systems, cloud platforms, and projects while managing risks, policies, and compliance for a multi-country enterprise.
As an Inhouse IT
Security Consultant, you act as a trusted advisor and central point of contact
for all security-related topics. You ensure that IT security is embedded across
systems, processes, and projects — from stores and warehouses to corporate IT,
cloud platforms, and data-driven services. You work closely with national and
international stakeholders to protect our business against current and future
cyber threats.
Responsibilities:
- Security Consulting
& Advisory
- Act as Single Point
of Contact (SPoC) for internal customers on all IT-security-related matters
- Advise national and
international projects, including initiatives involving cloud and innovative
technologies
- Provide security
guidance throughout the entire service and project lifecycle
- Risk Management
& Security Assessments
- Conduct security
reviews, risk assessments, and protection needs analyses
- Support internal
stakeholders through risk acceptance and policy exemption processes
- Perform cloud
security assessments and vendor security evaluations, including definition of
additional security requirements for contracts
- Review and decide on
firewall rules, server internet access, proxy requests, and security solution
concepts
- Governance,
Standards & Architecture
- Proactively develop
and improve security policies, standards, and the enterprise security
architecture
- Ensure compliance
with relevant frameworks and regulations (e.g. ISO 27001, NIST, BSI
IT-Grundschutz, GDPR)
- Support ISMS
activities together with Business Relationship Managers and Operational Risk
Management
- Operations,
Resilience & Lifecycle Support
- Support service
owners during onboarding, penetration testing, and remediation tracking
- Support planning and
execution of disaster recovery and IT Service Continuity Management (ITSCM)
activities
- Act as security
contact for recovery concepts and recovery exercises
- Foster automation
and standardization of security-relevant processes (e.g. Security as Policy)
- Collaboration &
Continuous Improvement
- Closely collaborate
with national and international teams across multiple countries and functions
- Actively participate
in internal security communities and communities of practice
- Scout new security
technologies (e.g. MFA, monitoring, detection capabilities) and share knowledge
- Identify, drive, and
implement improvements and standardization in security-related topics
Requirements
- University degree in
Computer Science, Information Technology, or a comparable qualification with a
strong focus on IT Security
- Solid professional
experience in IT security, ideally in an enterprise, consulting, or auditing
environment
- Strong technical and
methodological knowledge of IT security principles, technologies, and best
practices
- Good understanding
of modern IT environments, with a strong focus on Microsoft technologies and
Azure
- Knowledge of
relevant security standards, regulations, and compliance requirements
- High communication
skills with the ability to advise, influence, and convince stakeholders at all
levels
- Very good command of
English (spoken and written)
- At least three years
of professional experience in IT security
- Experience in
international or multi-country environments
- High willingness and
ability to quickly familiarize yourself with new topics and technologies