Product & Solution Security Expert (m/f/d) wanted!

For a project we are looking for a Product & Solution Security Expert (m/f/d).

1.Conduct Cyber Regulation Analysis

a) Review and analyze relevant cyber regulations, with a focus on NIS 2 compliance requirements

b) Document gaps and areas requiring alignment

2. Perform Risk Assessments

a) Work with process owners to identify potential vulnerabilities and threats within common services

b) Support the development of a comprehensive risk profile to prioritize mitigation actions

3. Work with Process Owners to Align the Cybersecurity Incident Response Plan (CSIRP)

a) Collaborate with relevant stakeholders to ensure the CSIRP is aligned with NIS 2 requirements

b) Support the development of procedures for incident identification, containment, recovery, and reporting

4. Collaborate on Implementing Security Measures

a) Work with relevant teams to recommend and implement appropriate security measures to mitigate identified risks

b) Ensure alignment with best practices and NIS 2 directives

5. Be the Point of Contact for NIS 2 in Germany

a) Act as the primary resource for NIS 2 matters, providing support to the head of Siemens Software in Germany when interacting with relevant authorities

b) Respond to inquiries within the stipulated timeframe

6. Work with Process Owners on Awareness and Training

a) Collaborate with process owners to ensure training initiatives on NIS 2 compliance and cybersecurity best practices are aligned

b) Provide guidance to align content with regulatory requirements

7. Support Ongoing NIS 2 Alignment Efforts

a) Work with teams to maintain compliance in key areas, including risk management, response planning, and employee awareness

b) Regularly update stakeholders on progress and new requirements

• Completed studies (Bachelor) in (business) informatics or comparable
• At least 5 years of professional experience
• Experience in analyzing cyber regulations and previous experience on NIS 2
• Experience with risk assessment to identify potential vulnerabilities and threats and cybersecurity incident response plan (CSIRP) aligned with NIS2 requirements
• Language: English and German

Order Type: Temporary Employment (Arbeitnehmer berlassung)

Location: Remote/Karlsruhe

Start: asap

Duration: 30.06.2025 (with option of contract extension)

If you are interested, please let us know your hourly rate (Remote and Onsite) and your availability. We are looking forward to your application and a portfolio quoting the reference-number 3807.

Any Questions? Call Nadezda Baldandorzhieva +49 176 427 481 65.