Information Security and Data Protection Project Manager (m/f/d)

Dornbirn, Austria

SpotLIGHT of the job

Join the Zumtobel Group as an Information Security and Data Protection Project Manager, where you will play a key role in shaping and strengthening the organization’s security and compliance landscape. Working closely with the CISO, you will drive the development and implementation of strategies, policies, and frameworks to safeguard information and ensure data protection across the group.

Responsibilities

Information Security and Data Protection Project and Progame Management: You will work as an Information Security and Data Protection Specialist (m/f/x) in the Information Security and Data Protection Team of the Zumtobel Group and support the CISO in the further development and implementation of strategies, specifications, policies and procedures to ensure Information Security and Data Protection. You will also act as the central point of contact for all questions relating to Information Security and Data Protection within the Zumtobel Group.
ISMS and NIS2: You support the team significantly in setting up a group-wide ISMS and the associated organisation and ensure compliance with the NIS2 Directive.
KPIs: You define KPIs and measures for the continuous improvement of the ISMS and coordinate these with the team and the CISO on an ongoing basis.
Cyber Security Regulations: You have an overview of the latest regulations in the area of Cyber Security and Data Protection and support the Team with your in-depth expertise in the implementation of legal requirements.
IT-Security: You evaluate specific security-related requests and work closely with our different stakeholders, which is responsible for the technical realisation of IT security measures.
Audits: You plan and support internal and external audits in the area of information security.
Cross-functional Collaboration & Consulting: You closely collaborate with other departments and stakeholders to achieve improvements, e.g. with IT, Finance and Supply Chain Management, providing cross-functional support.
Awareness: You will also be responsible for creating presentations and training courses.

Skills & Experience

Education with a focus on IT or information security (e.g. University/University of Applied Sciences) and several years (6+) of relevant professional experience.
You have in-depth knowledge and experience in the field of Data Protection and Information Security and are familiar with the applicable security technologies and standards (e.g. ISO 27001, ISO 62443, etc). Ideally, you will have experience in implementing and operating an integrated ISMS and DPMS.
You have a strong knowledge of management systems and project/process management.
Information Security and Data Protection risk assessments are no problem for you. You support the CISO and his Team in the implementation and create reports.
You have in-depth knowledge of the implementation of requirements and measures from NIS2 and NISG 2024 as well as other EU-wide and international laws such as the Cyber Resilience Act, GDPR, AI Act, PSTI Act, Data Act, etc.
Conflict management and have excellent communication skills and assertiveness.
You can understand complex concepts and have a positive attitude and high resilience.
You are successful in handling multiple projects independently and always give your all to continuously improve the output, energizing the team to move forward.
Your very good written and spoken English to communicate confidently with local and international colleagues.