Senior Information Security Manager (m/f/d)

About us

Since its founding in 2000, the CEE Group has been synonymous with holistic expertise in renewable energies. As a fully integrated asset manager, we have specialized in the repowering and hybridization of our own existing facilities in addition to the acquisition of solar, onshore wind and storage projects. From project acquisition to commissioning and beyond, we focus on quality, innovation and sustainability. By using state-of-the-art technologies and sustainability concepts, we aim to achieve optimal returns for investors while promoting environmental protection. Long-term, trusted partnerships with all stakeholders form the foundation for our sustainable success in the dynamic renewable energy market. At our location in Hamburger City, we have already implemented 104 projects in Europe with 2.2GW(p) rated performance with over 130 employees and manage a total of about 2.8 billion. EUR AuM in various investment funds and special clients. Further information: www.cee-group.de

Your employer actively shape the successful energy transition and become part of the CEE Group IT team at Hamburg City

Senior Information Security Manager (m/w/d) It's waiting for you

Governance, Risk & Compliance Responsibility for building, operation and further development of our ISMS according to ISO 27001/27019 and compliance with regulatory requirements (including NIS2, KRITIS) Implementation and optimization of risk analyses in IT and OT, including treatment plans, KPI/KRI reporting and management reviews Planning and management of re-certification audits and monitoring of external audits OT Security Engineering Curing and segmenting of IT/OT networks in solar and wind power plants, developing access and patch concepts, remote access, asset and vulnerability management Development of detection and response processes (e.g. SIEM/EDR, Logging-Uses-Cases, Playbooks) as well as business continuity and disaster recovery Control of safety-relevant measures in solar and wind farms Awareness & Third Party Risk Advice and training of internal stakeholders and development of awareness programs Defining and reviewing safety requirements for suppliers and service providers and monitoring assessments

That's what you bring

Completed studies or training in the IT environment Multiannual experience in information security, ideally at the IT/OT interface Very good knowledge of ISO 27001/27019 Experience with KRITIS and NIS2 (or their national implementation) Risk Management and Audit Management Expertise confidentiality with security technologies (e.g. IAM, EDR/SIEM, network segmentation, secure remote maintenance); IEC 62443 or BSI basic protection are advantageous Analytical method, hand-on mentality and communication strength Joy in taking responsibility and making things visible Very good German knowledge (min. B2), good English knowledge

We offer you

independent work with corresponding freedoms and flat hierarchies Work in a young and innovative growth industry, in a modern office in the city centre of Hamburg High-motivated and valuable team Focus on sustainable action Attractive salary package incl. variable share Occupational pension and accident insurance Grants for the HVV Professional Ticket and Sports Program Operational health management Hybrid working time model with the possibility of working mobile up to 2 days per week 30 days holiday (December 24/31) and special holiday on special occasions