Stellenticket Humboldt-Universität zu Berlin

TU Berlin is a major university of technology with a rich tradition and an international reputation. We currently have approximately 34,000 students and more than 7,000 members of staff. TU Berlin has been a University of Excellence since 2019, and, together with Freie Universität Berlin, Humboldt-Universität zu Berlin, and Charité - Universitätsmedizin Berlin, is part of the Berlin University Alliance consortium of excellence.

Due to an increasing reliance on technology, the high degree of decentralization at universities, and their heightened risk of cyberattacks, information security has a high priority at TU Berlin. To ensure information security in research, teaching, and administration, we are looking for a dedicated and experienced professional for the position of chief information security officer. Since 2024, a project team led by the vice president for digitalization and sustainability and the vice president for administration has been implementing an information security management system (ISMS). As the central point of contact for all matters of information security, you will play a key role in safeguarding the University's digital infrastructure. In close cooperation with the Executive Board, the IT department, and the University's various departments and faculties, you will strategically and operationally shape the further development of our ISMS and promote a security culture across the entire University.

1. Strategic tasks:

• Designing, establishing, managing, and advancing an information security management system (ISMS) in line with ISO/IEC 27001 and BSI baseline protection
• Preparing decision papers on information security to provide tactical and strategic support for the Executive Board and chief information officer (CIO) of TU Berlin
• Defining and implementing information security objectives and protection requirement analyses in close coordination with the chief risk officer (CRO) of TU Berlin to ensure holistic risk management

2. Tactical tasks:

• Providing technical and security-related expertise to support the CIO in the strategic alignment of IT security
• Establishing, updating, and operational implementation of emergency management (emergency preparedness and emergency plans) for information security risks and cyber incidents in coordination with Campus Management (ZECM) and the CRO to ensure business continuity
• Representing TU Berlin in relevant committees on information security, including national and international networks and cooperation with CERTs and authorities
• Advising and supporting the CIO, Campus Management, the University Library, and the faculties on security-specific issues such as cybersecurity risks, compliance (EU GDPR, German IT Security Act) and the implementation of security standards and best practices for technical and application-specific IT operations with the support of the University's Computer Emergency Response Team (TU CERT)

3. Operational tasks:

• Developing and managing TU CERT for proactive threat detection, incident response and forensics, and cooperating with other CERTs and authorities
• Coordination in the event of information security incidents and support in managing them, including crisis management and recovery measures together with TU CERT and in close coordination with the CIO
• Reporting on the status quo of information security to the Executive Board and relevant stakeholders, including defining and monitoring KPIs
• Advising and supporting TU Berlin employees on information security issues
• Creating suitable training materials and implementation of security awareness training courses to raise awareness among TU Berlin employees
• Advising and support in the development and implementation of modern security concepts such as Zero Trust, Identity and Access Management (IAM), cloud security, and AI-based security solutions

• Higher university degree (master's degree, Diplom, or equivalent) in business informatics/computer science, applied computer science, or a comparable program
• Several years of sound professional experience in the conception, introduction and further development of information security management systems or comparable equivalent knowledge
• Comprehensive knowledge of relevant standards and frameworks (incl. corresponding proof), in particular:
  o BSI IT baseline protection (IT-Grundschutz)
  o ISO 27001
  o ITIL
• Experience in IT risk management, developing security guidelines, and implementing security analyses and audits

In addition, we expect:

• Strong analytical and conceptual skills as well as a structured, solution-oriented work ethic (desirable)
• Experience managing interdisciplinary projects and working with IT units, the administration, and management
• Experience and knowledge of the higher education sector (desirable)
• Ability to work in a team, high resilience, and work systematically and in a goal-oriented manner in crisis situations (security incidents and emergency management) (desirable)
• High level of communication and advising skills when dealing with people with different backgrounds, including non-technical professional backgrounds (desirable)
• High sense of responsibility and a strong commitment to confidentiality and security (desirable)
• Very good written and spoken German
• Good written and spoken English

Please submit your application with all relevant documents attached as a single PDF file by email only quoting the reference to Lars Oeverdieck, vice president for administration at Technische Universität Berlin, at k@tu-berlin.de.

By applying via email, you agree to the electronic processing and storage of your data. Please note that we do not provide a guarantee for the protection of your personal data when submitted as an unprotected file. Information on the processing of your data in accordance with the General Data Protection Regulation can be found on the website of the human resources department: https://www.tu.berlin/en/abt2-t/services/rechtliches/data-privacy-statement-for-job-applications.

In the interests of promoting equality of opportunity for men and women, we particularly encourage applications from women with suitable qualifications. Preference will be given to applicants with severe disabilities who equally fulfill the requirements of the position. TU Berlin values the diversity of its members and is committed to equal opportunities.