Senior Security Assurance Analyst (d/f/m)

Senior Security Assurance Analyst (d/f/m)

Join to apply for the Senior Security Assurance Analyst (d/f/m) role at Scout24 SE .

Overview

Scout24 is home of ImmoScout24, Germany’s #1 for real estate. With ImmoScout24 we have been revolutionizing the real estate market in Germany and Austria for more than 25 years. Our goal is to build a digital ecosystem that brings homeowners, seekers, and agents together. Finding the right home and property is one of the most important decisions in life. So is your career!

Why Scout24?
Scout24 is home of ImmoScout24, Germany’s #1 for real estate. With ImmoScout24 we have been revolutionizing the real estate market in Germany and Austria for more than 25 years. Our goal is to build a digital ecosystem that brings homeowners, seekers, and agents together. Finding the right home and property is one of the most important decisions in life. So is your career! #WorkingatScout24 means being part of a diverse and inclusive team of 1,060 colleagues and 58 nationalities. We embrace difference and celebrate individuality. By encouraging open mindedness and authenticity we enable a true learning culture and prepare the ground for personal development. Mistakes are a chance to grow and to innovate. Together we act proactively, strive for improvement, and take responsibility. We talk about success and challenge while treating each other with respect because we are #oneteam.

If this sounds interesting to you, we would love to see you joining us! Even if you may not tick all the boxes of the job requirements, we are happy to hear about the value you can add to the team. Grow with us! Welcome home!

Aside from our people and company culture we are offering awesome benefits that make Scout24 a great place to work!

• Compensation: A competitive salary package and a bonus on top.
• Flexibility: Hybrid working model, autonomous working time management and 30 days of vacation annually.
• Work from abroad: Remote working policy includes the possibility to work from abroad for a few weeks per year (subject to business needs).
• Relocation: Our relocation agency supports visa process and relocation package.
• Use our products: Plus membership for tenants on ImmoScout24 to find a new place to live.
• Development: Learning time per month, online courses on ScoutAcademy, regular book challenges, structured feedback, Lunch & Learn events, and individual career paths.
• Family support: Professional family service to help find childcare or emergency childcare.
• Dog-friendly policy: Bring your dog to work (with approvals and allergy-conscious rules).
• Mobility: Subsidies for public transport or Job Bikes.
• Sustainability & DEI: Clear environmental goals and involvement in social activities; diverse and inclusive culture.
• Pension scheme: Company pension with attractive subsidy.
• Office: Barrier-free, central Berlin location with gym, napping room, rooftop terrace, organic coffee, cafeteria, 100% green electricity, and weekly massage.
• Health: Life Situation Coaching, regular health check-ups.
• Tech: Work with the latest technical tools and hardware.

Responsibilities

• Lead and continuously improve Scout24\’s Information Security Management System (ISMS) program, ensuring alignment with ISO 27001 standards and business objectives
• Coordinate and manage ISO 27001 certification audits, including preparation of audit documentation, liaison with external auditors, and remediation tracking
• Establish and manage a robust third-party vendor risk management program, conducting security assessments and due diligence for critical suppliers and partners
• Create and deliver engaging security awareness training programs tailored to different audiences, from developers to executive leadership
• Prepare and present security metrics, KPIs, and IT risk posture reports to security leadership and board-level committees, translating technical risks into business impact
• Ensure compliance with GDPR, NIS 2 directive, and EU AI Act requirements, partnering with legal and privacy teams to implement necessary controls
• Drive continuous improvement initiatives through gap analyses, maturity assessments, and benchmarking against industry best practices
• Lead security due diligence activities for mergers and acquisitions, coordinating post-merger ISMS integration to ensure subsidiaries align with Scout24\’s security standards and controls
• Collaborate with engineering teams using GRC automation tools (e.g., Drata, Vanta) to streamline compliance processes

What You Need To Succeed

• Bachelor\’s degree in Information Security, Computer Science, or related field (or equivalent experience)
• Professional certifications such as CISA, CRISC, ISO 27001 Lead Auditor, or CISSP are highly desirable
• 5+ years of hands-on experience implementing and managing ISMS programs in medium to large organizations, preferably in technology or e-commerce sectors
• Proven track record of successfully managing ISO 27001 certification processes, including initial certification and surveillance audits
• Deep understanding of risk management frameworks (ISO 31000, NIST RMF) with demonstrated ability to conduct comprehensive risk assessments
• Strong knowledge of EU regulatory landscape, particularly GDPR, NIS 2 directive, and emerging EU AI Act requirements
• Demonstrated experience in vendor risk management, including developing assessment methodologies and managing vendor security questionnaires
• Track record of developing and delivering security awareness programs that drive measurable behavior change
• Excellent stakeholder management skills with ability to influence and collaborate across technical and non-technical teams
• Experience leveraging AI tools to drive problem-solving and productivity, maintaining effective human oversight and judgement

We aim to further enhance the diversity of our company and support the professional development of people with disabilities. We have a disability representative who will assist you throughout the application process. If you require this support, please let us know in advance.

Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology
• Industries: Technology, Information and Internet

#J-18808-Ljbffr