R

REWE Group Austria

Runs supermarkets, discount stores and drugstores

Information Security Officer

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeWiener Neudorf, Austria€70k

About the Job

Requirements

  • A completed degree or vocational training with a focus on information security or IT security is required.
  • Five to ten years of professional experience in a comparable role is required, ideally in an ISO-certified company.
  • Strong knowledge of relevant frameworks and standards, including ISO 27001, NIS2, CRA, COBIT, ITIL, and ISA 3402, is required.
  • Broad organizational and technical understanding of information security, including experience with internal control systems, key performance indicators, and governance structures, is required.
  • Experience analyzing and assessing technical security concepts and handling security incidents is required.
  • Substantial hands-on experience in risk management is required.
  • German and English proficiency at B2 level, with confident spoken and written communication in day-to-day work, is required.
  • Willingness to travel to Germany approximately twice per quarter is required.
  • An independent, analytical, precise, and solution-oriented approach is required.
  • Strong communication and presentation skills, including with C-level stakeholders, are required.

Responsibilities

  • Take responsibility for information security within the business unit and oversee the ongoing development and support of the information security management system.
  • Analyze risks under IT governance, risk, and compliance requirements and derive targeted measures to strengthen information security.
  • Identify, analyze, and continuously assess security-relevant processes.
  • Support IT procurement from an information security perspective, and assess technical security concepts and security incidents.
  • Plan and conduct internal audits and support external audits, such as ISO 27001 and ISA 3402, from preparation through implementation.
  • Create, maintain, and communicate policies, standards, requirements, and documentation, including Confluence content.
  • Clarify applicable policies and regulatory requirements, including NIS2 and CRA, and handle governance topics, including preparing key compliance content.
  • Take responsibility for service-class certifications and ensure data and process integrity, including establishing suitable controls and key performance indicators.
  • Prepare evidence and security documentation, formulate specialist policies, and contribute to the development of policies.
  • Advise executive management as the information security contact, present relevant security topics at C-level, and work closely with IT governance and group information security.

Desired Qualifications

  • Certifications such as CISSP, CISM, CISA, ISMS Implementer, or ISMS Auditor are desirable.
  • Experience in an ISO-certified company is desirable.

About the Company

REWE Group Austria

Runs supermarkets, discount stores and drugstores

REWE Group Austria runs supermarkets, discount stores and drugstores that sell groceries and everyday household goods to consumers. Its retail businesses combine different store formats with online shopping, while a shared organization handles purchasing and the movement of products to local shops. The group buys goods for resale through its stores and also operates wholesale and tourism businesses. Organized under REWE International AG, it manages the Austrian business and international grocery operations elsewhere in Europe as part of the German REWE Group. The Austrian business traces its roots to a Vienna shop opened in 1953 and is headquartered in Wiener Neudorf, Lower Austria.

Company size
10,001+
Company stage
Not listed
Total funding
Not listed
Headquarters
Wiener Neudorf, Austria
Founded
1953

Recently Posted Jobs

Explore more opportunities at REWE Group Austria

See more jobs