IT Infrastructure Specialist with Focus on IT Security

In IT Operations we are responsible for providing and maintaining a diverse IT infrastructure for the degewo Group. Our IT administration ensures smooth operation of the entire IT infrastructure across the Group. As your competent partner for all IT matters, our team of specialised administrators guarantees a stable and secure IT environment. In addition, we act as internal consultants, supporting our contacts across departments in various technical sub-tasks of degewo's requirements management, in tenders and awards, and in sub-projects.

IT Security: Responsibility for implementing security requirements, initiating continuous improvement measures and supporting as sub-project lead for further IT projects. Quality Assurance: Professional responsibility for the strategic orientation and continuous development of service areas and holistic control over the entire lifecycle; coordination of several partly complex services and administrative tasks. Holistic View: Management of external service providers, monitoring costs, quality and IT compliance; ensuring SLAs, availability and technical standards together with provider management. Knowledge Transfer: Regular coordination with other service areas, IT service and process management for active knowledge transfer and smooth collaboration; building complete documentation, developing SOPs and further developing requirements and change management; controlling IT change and release management.

Qualification: University degree in computer science or comparable training, e.g. as an IT specialist for system integration. Practical experience: Comprehensive knowledge of IT infrastructure, including network and infrastructure security, identity & access management, Active Directory / Entra ID security concepts, endpoint security, cloud security, vulnerability management, patch and update management, backup, restore and disaster recovery concepts, logging, monitoring and SIEM, security architectures and zero-trust approaches, encryption, certificates and key management. Familiarity with ISO 27001, GDPR, NIS2 plus several years of professional experience or targeted further training. Expertise: Sound competencies in managing security processes, including incident management, vulnerability management, security monitoring, access reviews, recertifications, audit action tracking, vulnerability analyses and penetration tests. Communication: Confident and audience-appropriate communication with a wide range of stakeholders in German and persuasiveness in presentations.