CISO, ICT Risk & BCM Manager (f/m/d)

Information Security (CISO)

• Review technical security concepts, control designs, and infrastructure-related risks in outsourced environments
• Challenge external ICT providers on security controls, monitoring, patching, backup/recovery, and resilience measures
• Develop and manage the information security strategy and ISMS
• Create and maintain security policies and standards
• Conduct security reviews, risk analyses, and support audits
• Advise management and provide regular reporting (quarterly/annual)
• Assess security-relevant changes and projects
• Manage security awareness programs and training
• Support security incident response and the development of SOC/SIEM 

ICT Risk Management

• Establish and develop the ICT risk management framework
• Translate technical findings into actionable risk assessments and management decisions
• Perform risk analyses, protection requirement assessments, and data classifications
• Maintain the ICT risk register and track mitigation measures
• Manage the risk acceptance process and coordinate with stakeholders
• Prepare regular risk reports for management and regulators 

Business Continuity Management (BCM)

• Build and operate the BCM system according to BSI 200-4 and regulatory requirements (e.g., DORA)
• Conduct business impact analyses (BIA) and define recovery times
• Create and maintain emergency, crisis, and recovery plans
• Plan and execute tests, exercises, and crisis simulations
• Provide awareness, training, and advisory support on business continuity and emergency management

• Several years of experience in information security, IT risk management, or BCM
• Strong technical understanding of IT infrastructure and cloud environments
• Ability to assess technical implementations and effectively challenge external service providers
• Experience in outsourced IT operating models is highly desirable
• Ability to combine regulatory, governance, and technical perspectives in a pragmatic way
• Strong knowledge of ISMS (e.g., ISO 27001), DORA, and BSI standards
• Experience with regulatory requirements and audits
• Analytical and structured working style with excellent communication skills
• Experience in the financial or payment services sector is a plus
• Excellent English and German skills 

• A position with great responsibility which is diverse and exciting
• Amazing benefits like a day off on your birthday, enabling you to celebrate this special day with family and friends 🍰
• Interesting and international working environment in the growing and forward-looking payment industry, characterized by a dynamic and open working atmosphere
• Team spirit, passion, creativity and flat hierarchies characterize our company
• Flexible working hours and home office options
• Modern office at Campus 21 in Brunn am Gebirge (with a free shuttle bus to and from Vienna)
• Legendary DIMOCO team events
• You will receive a competitive remuneration package, which we will be happy to discuss with you personally. For legal reasons we must state the gross annual salary which starts at EUR 70.000,- (full-time). However, depending on your qualifications and experience, a higher salary is of course possible.