Expert Information Security (gn) fulltime/parttime (hybrid)

Do you want to play an active role in driving a company’s growth and turning big plans into reality? Then join our team! You can look forward to exciting challenges, an inspiring environment, and a work culture that combines flexibility and collaboration – with our 60/40 hybrid model and modern offices in Ratingen as a hub for ideas. As part of our team, you will take on the following responsibilities: You support Integration Services in delivering secure, compliant, and resilient integration solutions and ensure the secure operation and continuous development of interfaces, data flows, integration platforms (e.g., APIM, Kafka, Kubernetes), and self‑service capabilities. You define, document, and own security concepts for integration platforms and solutions, ensuring compliance with internal security guidelines (e.g., Integration Security Guidelines, Secure Software Development, and Secure Engineering Principles). You support the implementation of regulatory and normative requirements such as ISO 27001, NIS‑2, DORA, and SCA, and represent integration platforms and solutions in all security‑relevant audits. You advise business units and technical stakeholders on the design of secure integration architectures (API, event streaming, file‑based integration) and on IAM, Zero Trust, least privilege, secrets management, and network segmentation. You conduct threat analyses and threat modeling for integration solutions, assess complex risk scenarios, and derive appropriate mitigation measures. You collaborate closely with the Security Operations Center (SOC), analyze and escalate security‑relevant incidents, support incident response and forensic activities, and define clear security monitoring KPIs while fostering a strong security‑by‑design culture.