IT Security Consultant

As an Inhouse IT Security Consultant, you act as a trusted advisor and central point of contact for all security-related topics. You ensure that IT security is embedded across systems, processes, and projects — from stores and warehouses to corporate IT, cloud platforms, and data-driven services. You work closely with national and international stakeholders to protect our business against current and future cyber threats.

• Security Consulting & Advisory

  • Act as Single Point of Contact (SPoC) for internal customers on all IT-security-related matters

  • Advise national and international projects, including initiatives involving cloud and innovative technologies

  • Provide security guidance throughout the entire service and project lifecycle

• Risk Management & Security Assessments

  • Conduct security reviews, risk assessments, and protection needs analyses

  • Support internal stakeholders through risk acceptance and policy exemption processes

  • Perform cloud security assessments and vendor security evaluations, including definition of additional security requirements for contracts

  • Review and decide on firewall rules, server internet access, proxy requests, and security solution concepts

• Governance, Standards & Architecture

  • Proactively develop and improve security policies, standards, and the enterprise security architecture

  • Ensure compliance with relevant frameworks and regulations (e.g. ISO 27001, NIST, BSI IT-Grundschutz, GDPR)

  • Support ISMS activities together with Business Relationship Managers and Operational Risk Management

• Operations, Resilience & Lifecycle Support

  • Support service owners during onboarding, penetration testing, and remediation tracking

  • Support planning and execution of disaster recovery and IT Service Continuity Management (ITSCM) activities

  • Act as security contact for recovery concepts and recovery exercises

  • Foster automation and standardization of security-relevant processes (e.g. Security as Policy)

• Collaboration & Continuous Improvement

  • Closely collaborate with national and international teams across multiple countries and functions

  • Actively participate in internal security communities and communities of practice

  • Scout new security technologies (e.g. MFA, monitoring, detection capabilities) and share knowledge

  • Identify, drive, and implement improvements and standardization in security-related topics

• University degree in Computer Science, Information Technology, or a comparable qualification with a strong focus on IT Security

• Solid professional experience in IT security, ideally in an enterprise, consulting, or auditing environment

• Strong technical and methodological knowledge of IT security principles, technologies, and best practices

• Good understanding of modern IT environments, with a strong focus on Microsoft technologies and Azure

• Knowledge of relevant security standards, regulations, and compliance requirements

• High communication skills with the ability to advise, influence, and convince stakeholders at all levels

• Very good command of English (spoken and written)

• At least three years of professional experience in IT security

• Experience in international or multi-country environments

• High willingness and ability to quickly familiarize yourself with new topics and technologies

• Growth opportunities in a continuously evolving organization

• Long-term job security at a stable company

• Competitive salary and benefits

• Practical and tailored training programs

• Varied tasks within a supportive and modern working environment

• Flexible working arrangements including home office options