Junior Information Security Officer (f/m/d) in Frankfurt am Main

(This position is limited for two years)Your area of workEurex Clearing AG Information Security 2nd Line of Defense organisation is responsible for the cyber security risk assurance program, cyber resilience, awareness and steering of processes, controls and compliance activities in the field of Information Security. Line of reporting is to the Chief Risk Officer of Eurex Clearing AG. Your responsibilitiesYou will be supporting the Eurex Clearing AG Chief Information Security Officer in a 2nd Line of Defense function You will receive a thorough training-on-the job and from day one on be tasked with own responsibilities under the supervision and with guidance of experienced colleagues of diverse professional backgroundYou will also support the implementation and maintenance of the information security risk assurance program, including control requirements consistent with ISO 27000-series based on the analysis of the threat landscape, applicable policies, standards, and regulationsYou will analyse, improve and document information security aspects in relevant business and IT processes, conduct risk assessments and support reporting on material risks and further Information Security related topics as part of reporting to boards & committeesYou will provide required evidence in audits (internal audits, regulatory audits, self-assessments, or customer questionnaires) and conduct ongoing and yearly review tasks regarding risk management, outsourcing and material Change ManagementYou will support track incidents together with CERT and will actively as well as professionally engage with business operations and IT in conversations that drive adequate Information Security risk decisions as well as risk treatmentYou will ensure employees and third parties understand, acknowledge, and fulfil all applicable information security policy requirementsYour profileUniversity degree (master or diploma) in physics, mathematics, IT or business administration or comparable educationPreferably strong interest in Cyber / IT security, information security risk management, or IT audit in the financial sectorAnalytical skills to understand, structure and prepare/explain complex topicsHigh self-responsibility & ownership, result orientation and (internal) customer focusAbility to develop a full and deep understanding of the business / IT operations and related information security risksProficiency in written and spoken German and English