Mitarbeiterin/Mitarbeiter (m/w/d) für Informationssicherheit im OT-Bereich
About the role
The Niedersächsischer Landesbetrieb für Wasserwirtschaft, Küsten- und Naturschutz (NLWKN) is seeking a staff member for Information Security in the OT area at its Norden location. This permanent position is classified under pay grade E 12 TV-L and is available at the earliest possible date. You will serve as a bridge between strategic and operational information security, supporting both the Information Security Officer and the Business Area 1 in developing and implementing security concepts and measures for IT and OT systems, particularly in the field of critical infrastructure for public services.
Responsibilities
- Development of information security concepts for water management facilities in flood, island, and coastal protection
- Planning and design of security measures, especially in OT environments for public services
- Coordination and implementation of specified security measures, particularly in OT environments for public services
- Participation in hardening OT systems while considering relevant security requirements
- Analysis of vulnerabilities and support in handling security incidents in IT and OT areas
- Participation in the establishment, operation, and further development of the ISMS according to BSI standards 200-1, 200-2, and 200-3
- Maintenance of security policies, security concepts, risk overviews, and action plans
- Support in implementing legal and organizational requirements
- Participation in the conception, implementation, and maintenance of Business Continuity Management according to BSI standard 200-4
- Participation in conducting Business Impact Analyses (BIA)
- Creation and maintenance of emergency, restart, and precautionary concepts
- Support in planning, executing, and evaluating emergency exercises
- Participation in crisis and emergency management as directed by the ISB/BCB
- Collaboration in internal working groups and projects in the areas of information security and Business Continuity Management
Requirements
- Completed Bachelor's or Diplom (FH) degree in Information Security, Computer Science, Business Informatics, or a comparable field of study
- In-depth knowledge of information and IT security as well as Business Continuity Management
- Sound knowledge of information security standards and norms (BSI standards 200-1, 200-2, 200-3, 200-4, IEC 62443)
- Knowledge of relevant legal frameworks (NDIG, NIS2 Directive, IT Security Law)
- Knowledge and practical experience with industrial control systems (ICS and OT systems)
- Basic understanding of and interest in hydraulic engineering structures and water management tasks, with willingness to familiarize yourself with this field
- High degree of initiative, independence, and commitment
- High level of teamwork, communication, and consulting skills, with ability and enjoyment of interdisciplinary collaboration
- Proficiency in standard office software (Microsoft Windows and Office) and communication tools
Benefits
- A very interesting, varied, and responsible position with good technical equipment
- Weekly working hours of 38.5 hours
- 30 days of annual leave per calendar year
- End-of-year bonus
- Company pension scheme (VBL)
- Targeted training opportunities
Pay
Pay grade E 12 TV-L
Schedule
38.5 hours per week. The position is fundamentally suitable for part-time work, provided that full-time coverage of responsibilities is ensured through job-sharing.