Tenders Are Invited For It Services: Consulting, Software Development, Internet And Support – Externer Ciso

It Services: Consulting, Software Development, Internet And Support – Externer Ciso. The Ecisos Area Of ​​Responsibility Includes The Following Activities; - Responsibility For Organization-Wide Information Security - Conception, Implementation, Operation And Continuous Improvement Of An Information Security Management System (Isms) - Definition, Participation And Coordination Of Security-Relevant Core Processes In Relation To Information Security - Regular Reporting To The Board On The Current Status Of Information Security - Contact Person And Consultant For The Board Of Directors On All Information Security Issues - Development And Control Of Information Security Regulations, Such As Guidelines And Policies As Well As Other Regulatory Documents, In Coordination With The Board Of Directors - Control And Implementation Of Risk Management In Relation To Information Security - Definition And Coordination Of Security Objectives And Security Measures As Well As Metrics (Kpi ) In Coordination With The Board - Recording, Implementing And Maintaining Information Security Requirements With The Involvement And Participation Of The Respective Areas - Coordination And Implementation Of Target Group-Oriented Awareness And Training Measures For Managers And Employees - Investigation Of Security-Relevant Events And Incidents As Well As Event-Related Coordination With Authorities Or External Parties As Part Of Information Security Incident Management - Control Of Internal Audits And Preparation Of External Audits As Part Of Audit Planning - Control Of The Implementation And Examination Of The Effectiveness Of Security Objectives And Security Measures To Carry Out These Tasks, The Eciso Has The Following Competencies And Authorities; - He/She Is Not Subject To Instructions In His/Her Area Of ​​Responsibility, I.E. H. The Manner In Which The Duties And Goals Are Implemented Is Ones Own Responsibility - He/She Must Be Informed As Required About All Topics Relevant To Information Security. Both Upon Request And Without Being Asked, As Long As There Is A Relevance For Information Security - He/She Must Be Involved At An Early Stage In All Projects And Changes That May Affect Information Security - He/She Has The Right To Report Directly To The Commercial Director - He/She / She Has Directive Authority On Information Security Regulations - He/She Reports Directly To The Commercial Director - He/She Has The Right To Audit All Areas That Store Or Process Information And Can Initiate Event-Related Internal Or External Audits - He/She Has The Right To Have A Say And Veto In All Decisions That Affect His Area Of ​​Responsibility, Especially In It Projects - As Part Of His Activities, He/She Has A Right Of Access To All Areas Used, A Right Of Access To All Internal And External Applications And A (Reading) Access Right To Everything Processed With Them Information In Compliance With All Legal Requirements, Int