Senior IT Security Consultant

As an Inhouse IT Security Consultant, you act as a trusted advisor and central point of contact for all security-related topics. You ensure that IT security is embedded across systems, processes, and projects — from stores and warehouses to corporate IT, cloud platforms, and data-driven services. You work closely with national and international stakeholders to protect our business against current and future cyber threats.

Responsibilities:

• Security Consulting & Advisory
  
• Act as Single Point of Contact (SPoC) for internal customers on all IT-security-related matters
  
• Advise national and international projects, including initiatives involving cloud and innovative technologies
  
• Provide security guidance throughout the entire service and project lifecycle
  
• Risk Management & Security Assessments
  
• Conduct security reviews, risk assessments, and protection needs analyses
  
• Support internal stakeholders through risk acceptance and policy exemption processes
  
• Perform cloud security assessments and vendor security evaluations, including definition of additional security requirements for contracts
  
• Review and decide on firewall rules, server internet access, proxy requests, and security solution concepts
  
• Governance, Standards & Architecture
  
• Proactively develop and improve security policies, standards, and the enterprise security architecture
  
• Ensure compliance with relevant frameworks and regulations (e.g. ISO 27001, NIST, BSI IT-Grundschutz, GDPR)
  
• Support ISMS activities together with Business Relationship Managers and Operational Risk Management
  
• Operations, Resilience & Lifecycle Support
  
• Support service owners during onboarding, penetration testing, and remediation tracking
  
• Support planning and execution of disaster recovery and IT Service Continuity Management (ITSCM) activities
  
• Act as security contact for recovery concepts and recovery exercises
  
• Foster automation and standardization of security-relevant processes (e.g. Security as Policy)
  
• Collaboration & Continuous Improvement
  
• Closely collaborate with national and international teams across multiple countries and functions
  
• Actively participate in internal security communities and communities of practice
  
• Scout new security technologies (e.g. MFA, monitoring, detection capabilities) and share knowledge
  
• Identify, drive, and implement improvements and standardization in security-related topics
  
  

Requirements

• University degree in Computer Science, Information Technology, or a comparable qualification with a strong focus on IT Security
  
• Solid professional experience in IT security, ideally in an enterprise, consulting, or auditing environment
  
• Strong technical and methodological knowledge of IT security principles, technologies, and best practices
  
• Good understanding of modern IT environments, with a strong focus on Microsoft technologies and Azure
  
• Knowledge of relevant security standards, regulations, and compliance requirements
  
• High communication skills with the ability to advise, influence, and convince stakeholders at all levels
  
• Very good command of English (spoken and written)
  
• At least three years of professional experience in IT security
  
• Experience in international or multi-country environments
  
• High willingness and ability to quickly familiarize yourself with new topics and technologies