Do you enjoy managing and prioritizing different stakeholder interests? Do you see it as a challenge to find creative solutions for complex problems? Then you are the right person to support our Scayle Payments Team, for which we are looking for an Information Security Officer (m/w/d) as part of the IT Compliance organization. Within the team, you will play a critical role, in introducing and promoting (regulatory) compliance, best practices, and establishing secure ways of working with our IT systems. You will be the main contact for IT governance and security advice as well as consultancy services for our engineering and other teams to achieve best practice IT security and regulatory compliance.

The Payments team is responsible for the complete payment lifecycle, from customers first placing their orders within the Checkout to handling the refund of a returned item weeks later. The applications of the Payment team maintain span from high traffic & fault tolerance API hubs to security-conscious and reliable backend processing engines.

What you will do

- Performing the tasks of information security management in accordance with ZAIT (MaRisk, DORA, etc.)

- Experience in implementing the BSI standards for IT baseline protection and/or ISO 2700x

- Definition of information security requirements and management of implementation

- Design of security processes to ensure adequate protection

- Development, implementation and continuous improvement of the Information Security Management System (ISMS)

- Ensuring the implementation of measures to comply with IT security standards and monitoring the maintenance of IT security
- Carrying out regular risk assessments and business impact analyses and deriving the necessary measures

- Presenting and coordinating the risk situation at management level

- Coordination and implementation of target group-oriented awareness-raising and training measures on information security

- Accompanying internal and external audits on information security management

- Practical experience with the use and further development of an ISMS

- Ideally in-depth expertise in information risk management and knowledge of emergency management

- Specialist knowledge in the field of security technologies (e.g. authentication, VPN, proxy services, DDoS defense, firewalls, intrusion detection and prevention systems)

Who you are

- Relevant professional experience (3-5 years) in the payment sector, including Fintecs and in the software development sector

- Hands-on mentality; business knowledge

- Full-time, working in Hamburg (so should be willing to relocate if necessary)

- Very good English skills

- Strong communication skills

Additional Information
*Working model:

Due to the upcoming tasks and responsibilities for this position, it is required to work onsite at our headquarters in Hamburg on a weekly basis. Therefore we’ve implemented a hybrid working model that allows us to work remotely on Mondays and Fridays and to work onsite from Tuesday to Thursday.

YOU ARE THE CORE OF ABOUT YOU.
We take responsibility for creating an inclusive and exceptional environment where all genders, nationalities and ethnicities feel welcomed and accepted exactly as they are. We believe that a diverse workforce essentially contributes to the ABOUT YOU culture. In order to maintain talent and diversity, we emphasize the care for physical health, mental health and overall well-being. Our values and work ethics essentially contribute to our brand mission: empower acceptance and shape an inclusive, fair and circular fashion culture.

We are looking forward to receiving your application – preferably via our online application portal! Thus, we can ensure a faster process and for you it is very easy to upload your application documents. :-)