Location:
Wien
Working hours:
Full-time
Occupational Area:
IT
Company:
Erste Group Bank AG

Your Tasks

• Research current and planned regulations/legislation and industry-specific requirements that have an impact on security
• Be responsible for creating, reviewing, and advising on cyber security policy requirements and controls across the Group
• Support cyber security resilience analysis through security gap assessments, evaluation, and documentation across international entities
• Help to review the information security documentation of Group solutions and projects, defining the risks based on IT risk management methodologies
• Be responsible for defining and reviewing metrics, as well as enforcing, monitoring, and reporting it across international entities
• Support the onboarding of Erste Group subsidiaries to the security control system, providing support and advice as required
• Work closely with Erste Group entities in Central and Eastern Europe and their local cyber and information security experts to understand their challenges, provide cyber security advice and guidance, and promote a culture of cyber security awareness and responsibility
• Participate in cyber security projects and initiatives and help implement cyber security controls
• Support in the analysis and evaluation of emerging technologies and the definition of appropriate security controls thereof
• Stay abreast of the latest cyber security trends, threats, and best practices, and share your knowledge and insights with your team and organisation

Your Background

• Good knowledge about Cyber Security threats and defence control methods, based on best practices and established frameworks
• Experience with IT risk management methodologies and security gap assessments
• At least 4 years of field experience in cyber security, especially on governance activities, preferably in the financial sector
• Proofed knowledge (certification) and studies (like Bachelor’s or Master’s degree) on the IT field, such as Information Technology, Computer Science, Cyber Security, or related
• Fundamental knowledge on Knowledge of cyber security frameworks, standards, and external regulations, such as ISO 27001, NIST, DORA, NIS2, PSD2, SWIFT, etc.
• Excellent communication skills in English to facilitate the cooperation between information & cyber security, data privacy, IT and business representatives, locally and internationally
• Ability to provide clear and actionable cyber security advice and guidance
• Strong analytical and problem-solving skills, as well as attention to detail

Our Offer

• Possibility to benefit and learn from our international, talented and passionate community at Erste
• Great learning curve through ownership and creative freedom
• Language courses for German & English – Learning a new language unites. We support you with appropriate language courses where you participate together with your colleagues.
• We offer our employees the opportunity to divide their hours between working from home and at the office.
• Discover and enjoy the benefits of Erste Group.
• The minimum wage for this full-time position in accordance with the collective agreement with complete fulfillment of the functional profile is EUR 48.323,00 gross per year. But this is just a formality - we would be happy to talk about your actual salary in person!
• We consider the diversity of our employees as key to innovation and success. As employer we are proud to offer everyone equal chances, irrespective of age, skin colour, religious belief, gender, sexual orientation or origin.