Administration / IT Specialist: IT Security with ISO Tasks 80 - 100%

About the job

• Professional involvement in the creation and further development of IT security policies
• Operational implementation of requirements derived from policies, ISDS and data protection
• Provision of technical documentation,
  guidelines and operational concepts in the area of
  IT security
• Definition and operation of security-relevant
  processes and procedures
• Professional advice to operations, ISDS and data protection on ISDS concepts and data protection impact assessments

• Development, integration and further development of measures to secure the IT environment
• Overall responsibility for the operational security incident lifecycle
• Regular service and quality meetings with the SOC
• Ensuring compliance of SOC services with organisational, regulatory and legal requirements
• Continuous improvement of detection and
  response capabilities
• Assessment of the current threat situation and
  derivation of operational measures

• Sound knowledge in security operations, incident response and SIEM / SOC processes
• Understanding of regulatory requirements in healthcare (advantageous)
• Further training in ICT security (CAS / MAS, CISSP, CISM or similar)
• Several years of experience in IT security

• Ability to prioritise security-relevant measures in a structured manner
• Independent, service- and goal-oriented working style
• High planning and organisational skills

• Assertive and strong communication skills
• Ability to translate technical matters into risk and
  impact statements
• High sense of responsibility
• Calm, clear and decisive in crisis situations

• Training and Further Education: We generously support training or further education projects that are also in the company’s interest, as the professional and personal development of our employees is very important to us. This also applies with regard to filling management positions, as we prefer internal appointments.
• Attractive Employment Conditions: Our employment conditions are based on the GAV Berner Spitäler und Kliniken . In various areas, we exceed the GAV standards and, for example, already reward 2- and 5-year company anniversaries with days off.
• Great Collaboration Across All Professions: Everyone talks about interdisciplinary and cross-professional collaboration – we do it too! Projects and working groups are deliberately composed interdisciplinarily and cross-professionally. We also consciously promote informal exchange between professional groups through various activities.
• Family, Leisure and Work (You): We offer attractive working (time) models, the option of unpaid leave or the possibility of part-time work in all areas, including management. We are happy to accommodate individual needs.

If you have any questions about the position, please contact Marc Aemmer, Head of Communications and Security / IT and Digitalisation.