Information Security Officer
€70k
Senior, Expert
Bachelor's
Wiener Neudorf, Austria
HybridThree days on-site per week; two days of home office are possible. Travel to Germany about twice per quarter is required.
CybersecuritySecurity Governance, Risk & Compliance
About the job
Requirements
- A completed degree or vocational training with a focus on information security or IT security is required.
- Five to ten years of professional experience in a comparable role is required, ideally in an ISO-certified company.
- Strong knowledge of relevant frameworks and standards, including ISO 27001, NIS2, CRA, COBIT, ITIL, and ISA 3402, is required.
- Broad organizational and technical understanding of information security, including experience with internal control systems, key performance indicators, and governance structures, is required.
- Experience analyzing and assessing technical security concepts and handling security incidents is required.
- Substantial hands-on experience in risk management is required.
- German and English proficiency at B2 level, with confident spoken and written communication in day-to-day work, is required.
- Willingness to travel to Germany approximately twice per quarter is required.
- An independent, analytical, precise, and solution-oriented approach is required.
- Strong communication and presentation skills, including with C-level stakeholders, are required.
Responsibilities
- Take responsibility for information security within the business unit and oversee the ongoing development and support of the information security management system.
- Analyze risks under IT governance, risk, and compliance requirements and derive targeted measures to strengthen information security.
- Identify, analyze, and continuously assess security-relevant processes.
- Support IT procurement from an information security perspective, and assess technical security concepts and security incidents.
- Plan and conduct internal audits and support external audits, such as ISO 27001 and ISA 3402, from preparation through implementation.
- Create, maintain, and communicate policies, standards, requirements, and documentation, including Confluence content.
- Clarify applicable policies and regulatory requirements, including NIS2 and CRA, and handle governance topics, including preparing key compliance content.
- Take responsibility for service-class certifications and ensure data and process integrity, including establishing suitable controls and key performance indicators.
- Prepare evidence and security documentation, formulate specialist policies, and contribute to the development of policies.
- Advise executive management as the information security contact, present relevant security topics at C-level, and work closely with IT governance and group information security.
Desired Qualifications
- Certifications such as CISSP, CISM, CISA, ISMS Implementer, or ISMS Auditor are desirable.
- Experience in an ISO-certified company is desirable.
About the company
REWE Group Austria runs supermarkets, discount stores and drugstores that sell groceries and everyday household goods to consumers. Its retail businesses combine different store formats with online shopping, while a shared organization handles purchasing and the movement of products to local shops. The group buys goods for resale through its stores and also operates wholesale and tourism businesses. Organized under REWE International AG, it manages the Austrian business and international grocery operations elsewhere in Europe as part of the German REWE Group. The Austrian business traces its roots to a Vienna shop opened in 1953 and is headquartered in Wiener Neudorf, Lower Austria.
Company Size
10,001+
Company Stage
N/A
Total Funding
N/A
Headquarters
Wiener Neudorf, Austria
Founded
1953
Get referred to REWE Group Austria
See people who can refer or advise you
Simplify's Take
What believers are saying
- Graduates get broad management training: REWE offers a 15-month program with store experience, rotations and an overseas project.
- Entry routes extend beyond university: REWE apprentices choose from 20 occupations on its Austrian careers site.
- The product range has owned alternatives: REWE sells organic, budget and household lines under its own brands.
What critics are saying
- Leadership representation trails the workforce: REWE reports 59.4% women in defined management roles, versus 69.5% of employees.
- Logistics depends on outside hauliers: REWE moves 65% of freight itself and outsources the rest.
- A long logistics rebuild lies ahead: REWE budgets EUR 600 million for ALPHA, with completion planned for 2030.
What makes REWE Group Austria unique
- Food production stays in-house: REWE cuts and packages meat at its Eberstalzell plant for its Austrian stores.
- Loyalty reaches beyond one chain: REWE says its jo Bonus Club rewards work across 16 partner companies.
- Local entrepreneurs run part of the network: independent ADEG merchants operate stores and employ their own teams.
Help us improve and share your feedback! Did you find this helpful?