Cyber Security Architecture and Strategy develops strategies and coordinates solutions to improve the security and data privacy level of BASF.
-
This role advises executives, consults and coordinates the implementation of improvements and monitors progress of the data privacy & cyber security landscape.
Main Tasks
-
Consultation on projects and initiatives to ensure that appropriate security measures are taken in relation to the criticality of processing personal data.
-
Integrate "Privacy by Design", "Privacy by Default" and Data subject rights into the design and development of systems, applications, and processes. This includes the use of privacy-friendly technologies throughout the product/project lifecycle, from design to deployment.
-
Development of best practices in the project workplace regarding data protection in collaboration with the Data Protection Office.
-
Development and evaluation of security & data privacy requirements in consultation with all strategic business areas, Enterprise Architecture and the data protection organization
-
Responsible for initiation of security projects and the role of professional caretaker for such
-
Steers suppliers to ensure compliance with BASF security requirements; further, conducts escalation and solution of security breaches and deviations
-
Active participation in industry networks of colleagues to discuss special topics and developments. Integrates the findings of those discussions into his/her evaluations
-
Communication and coordination with various internal stakeholders and communities to raise awareness for the security & data privacy strategy and to add value for the business strategy. Active exchange of knowledge and collaboration across teams within the IT- organization
-
Development and evaluation of measures to reduce identified security & data privacy risks, which have been construed from future threats.
-
Evaluation of possibilities to improve business and innovations through secure technologies; integration into strategic business requirements
-
Structure and evaluation of various innovative technologies with reference to security & data privacy in business environments (e.g. Internet of Things, Big Data & Cyber Security analytics, Cloud)
-
Analysis of drafts of the security architects in conjunction with the Enterprise Architecture Security domain as a basis for the development of technical solutions within IT- projects. Support for the development of security standards, which apply for all technologies of the IT- and product portfolio.
Minimum Education and Qualification Required for the Position
Completed Master's degree or comparable in the field of IT, e.g.:
-
Business Informatics
-
Industrial Engineering
-
Computer Science
-
IT Security
Professional experience:
-
At least 5 years in comparable positions
Practical experience:
-
Fast comprehension, strong conceptual and analytical skills and a sense for situational solutions
-
Experience with relevant data protection regulations
-
Strong technical knowledge and fundamentals of IT/OT security e.g. network segmentation, firewalls, endpoint security, anomaly detection
-
Above-average knowledge of data protection law as well as a passion for data protection.
-
Passion to cooperate in an international (regulatory) environment
-
Cyber security architecture and consulting
-
Knowledge of Zero Trust principles desired
-
Evaluation and implementation of new cyber solutions
-
Knowledge of common security standards is an advantage e.g. NIST, ISO27000
Other qualifications - Proficient language skills:
-
Business fluent English (at least B2) and German language skills
Other qualifications - IT skills:
-
Solid knowledge of MS-Office
-
ISO 27001 is an advantage
-
Basic understanding of business and IT processes
Other qualifications - Certifications are an advantage:
-
CISSP
-
CISM
-
CCSP
-
IAPP - CIPP/E, etc
Competencies
Please choose 3-4 competencies critical to this position, and the relevant level. These will be assessed at interview stage.