Information Security Officer (m/f/d)
- Vienna
- Full Time
The Information Technology Staff Unit is responsible, among other things, for digital transformation, defining the IT strategy, IT policies, IT security policies, and IT architecture, thereby making a significant contribution to strategic business development. The position is to be filled as soon as possible.
Your job, you...
- implement measures to ensure the integrity, confidentiality, and availability of information based on analyses and guidelines, and you actively further develop the information security level within your area of responsibility.
- plan, implement, and operate the Information Security Management Systems (ISMS) for internal partners and support their ongoing development.
- assess IT projects, services, applications, architectures, configurations, authorization requirements, and security-relevant processes in terms of protection needs, risks, compliance, and necessary security measures.
- create reports, decision-making bases, and recommendations for action regarding threats, measures, residual risks, and required information security measures for decision-makers and senior management.
- develop concepts, policies, training materials, and workshops to sustainably embed information security within the organization.
- plan, initiate, conduct, and oversee internal and external audits, security assessments, and penetration tests in close coordination with relevant stakeholders.
- assist in handling security incidents and lead or support projects or work packages with a focus on information security.
- serve as the central point of contact for information security in the areas you support, participate in coordination and decision-making platforms, and support or represent the CISO in relevant committees as needed.
Your profile, you...
- possess in-depth knowledge in the field of information security and in the operation and further development of an ISMS – ideally based on a completed technical university degree or equivalent professional experience.
- bring several years of relevant professional experience in comparable roles, such as in information security management, IT security, IT operations, or in an audit environment.
- are familiar with the relevant standards, norms, and regulatory requirements and are confident in their application, particularly in the ISO/IEC 27000 series (including ISO/IEC 27001:2022 and ISO/IEC 27002:2022), the IEC 62443 series, BSI IT baseline protection (especially BSI standards 200-1 to 200-3), GDPR, the NIS-2 Directive or the Austrian NISG 2026, as well as in relevant audit standards such as ISAE 3402.
- ideally hold certifications in the field of information security, e.g., CISA, CISM, or CISSP.
- work analytically, in a structured and independent manner, present yourself confidently and solution-oriented, and know how to build trust and acceptance among various stakeholders.
- are strong in both technical and professional communication, skilled in moderation, team-oriented, and take responsibility even in complex projects.
- have good command of English, both written and spoken.
Our offer
- We offer an international corporate environment with ongoing development and training opportunities.
- Role-specific certifications are supported.
- Canteen with a daily selection of warm lunches.
- We provide you with a modern workplace with excellent public transport connections.
- Numerous benefits (special conditions for rail travel & in our travel agencies, holiday homes and apartments
- in popular domestic holiday regions, in-house car sharing).
- We offer flexible working hours, home office options, and provide a nanny service as well as a nearby company kindergarten.
- For the position of "Expert in Information Security Management," the minimum salary (according to the collective agreement for railway companies) is €60,150.16 gross per year. Depending on qualifications and professional experience, an overpayment is possible, with this position offering an all-in agreement including flexitime options.
Your application
We look forward to receiving your meaningful online application (including CV, cover letter, and certificates). If you are an internal applicant, please also ideally include your SAP applicant extract.
We warmly invite you to visit our ÖBB Job Shop at Wien Mitte for any questions or further information. Our team is happy to assist you in person. You can find more information at: ÖBB Job Shop » Consultation in Wien Mitte The Mall - ÖBB Careers.
Women are an indispensable part of our success and corporate culture. We therefore particularly welcome applications from women, who will be given preference in the event of equal qualifications – taking into account the relevant framework conditions of all applications.
Please note that a criminal record certificate will be required as part of the hiring process.
Contact persons
For technical questions regarding this job advertisement, Iasmina Pop is available at +43 664/6179639.
For general questions about the application process, the ÖBB Recruiting Team can be reached at +43 5 1778 97 77888.
About the company:
Since 1923, we at ÖBB have shaped mobility in Austria and take responsibility for a modern infrastructure as well as the transportation of people and goods.
A career at ÖBB is not only diverse but also meaningful: As the largest climate protection company in the mobility sector, we keep Austria moving, drive the Austrian economy forward, promote innovation, and are a reliable, responsible employer. We support our employees in their professional and personal development, implement measures for their health, and together we create a corporate culture characterized by appreciation and respectful collaboration.
automatically translated