Senior Cyber Security Manager (w/m/div.)

The audio business within the Keenfinity Group combines decades of engineering experience with a portfolio of world-wide established brands such as Electro-Voice, Dynacord and Telex that enable communication, collaboration and live experiences around the globe. Our solutions include professional loudspeaker systems, installed and portable sound systems, conference systems, intercom solutions for radio and production as well as certified voice alarm and transmission systems for safety-critical applications. From event stages to hotels and conference centres to authorities, transport hubs and industrial facilities – our professional audio and communication solutions ensure that people are heard clearly, can work effectively and communicate reliably when it comes to it. In addition to our passion for technology, we place great emphasis on our work environment. We shape the future together with values such as trust, appreciation and sense of responsibility – courageous, customer-oriented and with strong team spirit! As a cyber security manager, you define, implement and enforce security standards in our modern, API-driven digital landscape. This role ensures the protection of our commercial platforms (particularly Salesforce, Frontend, Portal, Integrations) while allowing speed and scalability in a dynamic, resource-conscious environment where you need to balance multiple priorities. As part of a federalized CISO model and the First Line of Defence, you act as a primary security interface between the audio business unit and the central CISO office as well as a central cyber security entity in the audio business unit's IT landscape. In doing so, you will align risk mitigation with business agility and ensure compliance with relevant regulatory frameworks (NIS2, GDPR, ISO 27001 and – if applicable – DORA). Security Strategy & Governance Definition and implementation of a slim, risk-based cyber security strategy, geared to business priorities Introduction of security policies, standards and controls across all digital platforms (CRM, Frontend, APIs, ERP, MDM) Responsibility for the Identity & Access Management Strategy (SSO, RBAC, Least Privilege) Architecture & Platform Security Close cooperation with the E2E‐IT architect to integrate security into architecture design (Secure-by-Design) Definition of security requirements for API‐First and Headless architectures (OAuth2, OIDC, token-based security) Ensuring secure integration patterns across Salesforce, Portal, iPaaS and Backend systems Risk, Compliance & Operational Security Conducting risk assessments, vulnerability management and coordination of penetration tests Responsibility for Monitoring, Alerting and Incident Response — acts as an escalation entity for security incidents and data pans ensuring compliance with, for example, GDPR, NIS2, ISO 27001 and internal audit requirements; Definition of data protection and classification standards Governance & Reporting Regular reporting to the management level on security risks, compliance status and security KPIs/KRIs Participation in Security Governance Boards and Risk‐ & Compliance Forums; Escalation of critical risks to the central CISO office Ensure that findings from incidents are transferred to improvement measures Vendor and Stakeholder Management Security‐Governance for external partners (Salesforce, Implementation Partner, SaaS Provider) Definition of safety requirements in contracts, contract processing contracts (DPAs) and architectural decisions Acting as a trusted security partner for management — translation of security policies into business-relevant requirements and coordination of security priorities with business objectives and risk-taking

Education: successfully completed studies in the field of cyber security, information security, computer science or comparable qualifications Experiences and know-how: Multiannual experience in cyber security roles in modern cloud and SaaS environments; experience in securing API‐First architectures and Enterprise‐SaaS platforms; Experience in working in cross-functional teams with architects, engineering and business stakeholders. Practical experience in Cloud‐Security (AWS/Azure) and Enterprise‐SaaS platforms, including sound knowledge of Salesforce security models. Understanding OAuth2/OIDC, API‐Gateway security as well as securing integration layers (iPaaS, Headless architectures). Practical knowledge of ISO 27001, NIST CSF, NIS2 and GDPR and confidentiality with risk frameworks (e.g. ISO 27005, FAIR) — ability to translate requirements from frameworks into pragmatic controls. Nice-to-have: security certifications (e.g. CISSP, CISM, CISSP‐ISSAP, AWS Certified Security – Specialty); Experience in the participation of large-scale technological transformation programs (e.g. SAP/Cloud migration, ERP introductions, Post‐M&A integrations) personality and working methods: pragmatism and risk-based decision-making; Ability to reconcile security requirements with business objectives; safe handling of uncertainty in a fast-paced environment Languages: English language skills (in word and writing) are required; German skills at work level are desirable.

This position can also be occupied in Ovar. We offer flexible working models: from different part-time opportunities to mobile work to job sharing. Please contact us. Diversity and inclusion are not trends for us, but firmly anchored in our corporate culture. We are therefore pleased to receive all applications: regardless of gender, age, disability, religion, ethnic origin or sexual identity. .