As an Inhouse IT
Security Consultant, you act as a trusted advisor and central point of contact
for all security-related topics. You ensure that IT security is embedded across
systems, processes, and projects — from stores and warehouses to corporate IT,
cloud platforms, and data-driven services. You work closely with national and
international stakeholders to protect our business against current and future
cyber threats.

Responsibilities:

• 
  Security Consulting
  & Advisory
• 
  Act as Single Point
  of Contact (SPoC) for internal customers on all IT-security-related matters
• 
  Advise national and
  international projects, including initiatives involving cloud and innovative
  technologies
• 
  Provide security
  guidance throughout the entire service and project lifecycle
• 
  Risk Management
  & Security Assessments
• 
  Conduct security
  reviews, risk assessments, and protection needs analyses
• 
  Support internal
  stakeholders through risk acceptance and policy exemption processes
• 
  Perform cloud
  security assessments and vendor security evaluations, including definition of
  additional security requirements for contracts
• 
  Review and decide on
  firewall rules, server internet access, proxy requests, and security solution
  concepts
• 
  Governance,
  Standards & Architecture
• 
  Proactively develop
  and improve security policies, standards, and the enterprise security
  architecture
• 
  Ensure compliance
  with relevant frameworks and regulations (e.g. ISO 27001, NIST, BSI
  IT-Grundschutz, GDPR)
• 
  Support ISMS
  activities together with Business Relationship Managers and Operational Risk
  Management
• 
  Operations,
  Resilience & Lifecycle Support
• 
  Support service
  owners during onboarding, penetration testing, and remediation tracking
• 
  Support planning and
  execution of disaster recovery and IT Service Continuity Management (ITSCM)
  activities
• 
  Act as security
  contact for recovery concepts and recovery exercises
• 
  Foster automation
  and standardization of security-relevant processes (e.g. Security as Policy)
• 
  Collaboration &
  Continuous Improvement
• 
  Closely collaborate
  with national and international teams across multiple countries and functions
• 
  Actively participate
  in internal security communities and communities of practice
• 
  Scout new security
  technologies (e.g. MFA, monitoring, detection capabilities) and share knowledge
• 
  Identify, drive, and
  implement improvements and standardization in security-related topics

Requirements

• 
  University degree in
  Computer Science, Information Technology, or a comparable qualification with a
  strong focus on IT Security
• 
  Solid professional
  experience in IT security, ideally in an enterprise, consulting, or auditing
  environment
• 
  Strong technical and
  methodological knowledge of IT security principles, technologies, and best
  practices
• 
  Good understanding
  of modern IT environments, with a strong focus on Microsoft technologies and
  Azure
• 
  Knowledge of
  relevant security standards, regulations, and compliance requirements
• 
  High communication
  skills with the ability to advise, influence, and convince stakeholders at all
  levels
• 
  Very good command of
  English (spoken and written)
• 
  At least three years
  of professional experience in IT security
• 
  Experience in
  international or multi-country environments
• 
  High willingness and
  ability to quickly familiarize yourself with new topics and technologies