The role
We have big plans for Tomorrow. Our vision: Establish sustainable finance at the heart of society. That's a hell of a lot of work - so let's get started.
As our Information Security Officer (f/m/x), you will be responsible for safeguarding our company’s information assets and ensuring compliance with cybersecurity standards.
Your tasks will include:
- Implementing and adapting the Information Security Management System (ISMS) in alignment with cybersecurity standards (e.g. ISO 27001), partner contracts, and regulations.
- Developing, reviewing, and updating information security policies, procedures, and guidelines to ensure they remain current and effective.
- Evaluating, recommending, and implementing security technologies and tools to enhance the organization’s security posture.
- Planning and coordinating the execution of comprehensive information security (IS) risk assessments, including third-party risks.
- Reporting information security-related information, including risks and incidents, to relevant stakeholders across the organization.
- Overseeing and coordinating incident response and crisis management activities related to information security breaches and threats.
- Supporting the legal department in evaluating and ensuring compliance with relevant local information security laws and regulations.
- Leading and managing external security audits and penetration tests to identify vulnerabilities and ensure the continuous improvement of our security posture.
- Defining and implementing a security roadmap with internal “security community of practice” (CoP).
What we're looking for
- You have a Bachelor’s degree or similar qualification in computer science, information technology, or a related field.
- You have a professional security management certification.
- You have practical experience in a combination of risk management and information security.
- You’ve gained knowledge of common information security certifications and regulations, such as ISO 27001, SOC 2, MaRisk, NIS2, and Dora.
- You approach your work in an efficient, self-driven and structured manner.
- You have already experienced a work environment where you’ve been in the position of leading and engaging with cross-functional, interdisciplinary teams.
- Ideally, you would also bring experience from a BaFin-regulated financial company.
- Another plus but not an explicit must is experience with contract and vendor negotiations, as well as experience in cloud computing environments.
- You are fluent in German and English, written as well as spoken.
- You support the idea to create a better future for everyone by using money as a force for good.
What we offer
It will be fun too, we promise! Together with more than 100 like-minded colleagues, you will work every day to win people over to sustainable finance. Our culture is based on our
values, our active new work philosophy and on clear, ambitious goals. But the best way to get to know us is to come and meet us and experience Tomorrow for yourself. Salary
85.000-100.000 Euro Jahresbrutto + one-time 50.000 EUR in virtual shares
Transparency is Queen (and King). This is why we indicate a salary range for all jobs. Once we have got to know you better in an interview, we will be able to assess you individually and find out where you fit in our transparent salary matrix. You want to work remotely?
We want to give all employees at Tomorrow the opportunity to organize their personal life and working hours flexibly and in keeping with their own requirements. Working from home and mobile work are therefore integral parts of our remote-friendly work culture. At the same time, we believe in the huge advantages of meeting up and working together in person. Our fantastic office in Hamburg is the perfect space for this and available to you any time. Our office is wheelchair-accessible, has ground-level access and offers flexible options for designing your workspace. The amount of hours you spend on-site to suit you and your role at Tomorrow is something you can define with your team. As our Information Security Officer (f/m/x), it is possible to work remotely from anywhere in Germany for up to 100% of the time. What's the next step?
We'd like to welcome you to our community.
That is why we want to engage with you at eye level and invite you to come as you are - even if you think you don’t fit all the requirements yet.
If you're interested in working with us we need the following from you:
- Your resume, without photo or birth information
- Your salary expectations and earliest possible starting date.
- A few sentences about your motivation to build the banking of tomorrow with us
Besides, we would appreciate it if you let us know how you would like to be addressed (pronoun/preferred name) so that we can take that into account throughout the application process. Your contact at Tomorrow
Carolin