G

Gerresheimer

Global supplier of pharma packaging solutions

IT Information Security Manager

Security Governance, Risk & CompliancePosted on Nov 12
Full-timeDüsseldorf, GermanyNo salary listed

About the Job

Requirements

  • A completed degree in Computer Science, Business Information Systems, IT Security, or comparable vocational training.
  • At least five years of professional experience in Information Security, IT Security Governance, or ISMS.
  • Strong knowledge of establishing, operating, and developing information-security structures, including an ISMS.
  • Good understanding of threat landscapes, security risks, and protection requirements for information, systems, and business processes.
  • Experience collaborating with IT, business functions, and management to implement appropriate security measures.
  • Ability to define security requirements pragmatically, based on risk, and with an implementation focus.
  • A structured, analytical, and independent working style with a strong sense of quality and responsibility.
  • Strong communication skills and ability to present complex topics clearly and appropriately to different audiences.
  • Very good spoken and written German and English.

Responsibilities

  • Take professional responsibility for establishing, operating, and continuously developing an ISO 27001-compliant Information Security Management System (ISMS), including coordinating and implementing preparations for a planned ISO 27001 certification.
  • Identify, assess, and manage information-security risks, including defining and tracking appropriate measures.
  • Develop, maintain, and enforce information-security policies, processes, and standards.
  • Ensure compliance with legal, regulatory, and internal information-security requirements.
  • Prepare, support, and follow up on audits, assessments, and certifications, and ensure audit and evidence readiness.
  • Serve as the central information-security contact for management, business functions, IT, and external partners.
  • Advise and support projects and business functions on security-by-design and risk-oriented security requirements.
  • Manage and coordinate collaboration with IT Operations, Data Protection, Compliance, and other relevant stakeholders.
  • Establish and develop reporting and metrics systems to present the information-security posture transparently.
  • Support the governance aspects of security-incident handling and derive improvement measures.
  • Take professional responsibility for promoting, implementing, and enforcing security awareness across the company, including coordinating awareness measures, monitoring their effectiveness, and reporting to management.
  • Conduct and take professional responsibility for IT security reviews within the IT Sourcing Board process.

About the Company

Gerresheimer

Global supplier of pharma packaging solutions

Gerresheimer creates specialized packaging and drug delivery devices for the pharmaceutical and biotech industries. Its offerings include packaging solutions and device components for medicines, such as inhalers and insulin pens, as well as complex drug delivery systems. The company works by designing, engineering, and manufacturing these components to meet strict pharma quality and regulatory standards, serving as a global partner to pharma and biotech customers. It differentiates itself by shifting from consumer glass products to focused, high-spec packaging and device solutions for pharma and cosmetics, building its business around close collaboration with customers and end-to-end support. The goal is to help pharmaceutical and biotech companies bring safe, reliable, and scalable packaging and delivery technologies to market across the globe.

Company size
1,001-5,000
Company stage
IPO
Headquarters
Düsseldorf, Germany
Founded
1864

Recently Posted Jobs

Explore more opportunities at Gerresheimer

See more jobs