Referent für ISMS / EASA Part-IS (Nominated Person) (w|m|d)

We help people in need. We are used for this every day – with heart blood, a high level of commitment and many years of experience. As one of the largest air rescue organisations in Europe, we start from 38 stations to around 54,000 operations a year. In addition to a modern helicopter fleet, our crews have high-quality medical equipment. We ensure the highest possible performance standards both in flight operations, in medicine and in training and training. With our commitment in these areas, we are always pursuing a common goal: bringing help on the fastest way to the patient and thus saving lives.

Ensure highest information security in air rescue!

As a speaker for ISMS / EASA Part-IS (Nominated Person) (w|m|d), you build our information security management system, develop strategies and take responsibility for protecting our life-saving systems. Design the future of air rescue with us – safe, modern and effective!

Structure and Responsibility of ISMS – You build the Information Security Management System (ISMS) for ADAC Air Recovery and its subsidiaries according to ISO/IEC 27001 as well as relevant legal and regulatory requirements (including NIS2, EASA Part-IS). In addition, you are responsible for the information security management system as a nominated person EASA Part-IS. Strategy and risk management - You develop and implement the information security strategy in close coordination with management, IT, safety and compliance monitoring management. In addition, you identify, evaluate and tax the risks relevant to information security including the implementation of risk analyses and derivation of appropriate measures. Processes, guidelines and reporting systems - You are responsible for establishing guidelines, standards, processes for information security. As well as the establishment of an internal and external reporting system according to IS.I.OR.230, in close cooperation with the Safety Manager. Training and Awareness - You organize training and awareness campaigns and perform them. In addition, you develop specific safety/security performance indicators (SPI) and process. Audits and certifications - You control internal and external audits in the field of information security as well as the preparation and monitoring of certifications. Interface and crisis management - You act as an interface to supervisory authorities, customers, partners and internal bodies in all matters of information security. You develop and optimize emergency and crisis management in the area of cyber security in coordination with crisis management.

The theory sits – you have a successfully completed degree in the field of (economic) informatics, information security, aviation technology or a comparable qualification. Know-How – You bring experience in building and managing information security structures in regulated environments (ideally aviation or critical infrastructures/KRITIS), sound knowledge of relevant information security standards and legal requirements (e.g. ISO/IEC 27001, BSI IT-Grundschutz, NIS2, GDPR, EASA Part-IS) as well as experience in carrying out risk analyses, audits and in dealing with certification procedures. Communication – You have very good German and English skills in word and writing, so you can communicate safely and professionally in both languages and create documentation. What completes your profile – you bring the willingness to travel and always work motivated, accurate and careful. Teamability is self-evident and you are actively contributing to the joint success. In addition, you have a high level of integrity, sense of responsibility and absolute confidentiality in dealing with safety-critical information

Attractive remuneration Slip time ABO JOB and Deutschland-Ticket & Job-Rad Modern workplace equipment Company owned Barista Education