Information Security Officer (m/f/d)

• Define and maintain the Solvd Information Security strategy, ensuring alignment with business objectives and Group requirements.
• Establish and continuously enhance the Information Security Target Operating Model (TOM) across Solvd GmbH and PFCs.
• Lead the Information Security Community, ensuring collaboration, knowledge sharing, and consistent prioritisation across entities.
• Oversee the design and rollout of security policies, standards, and control frameworks (ISO 27001, GISF, NIS2, DORA, the Cyber Resilience Act, and COBIT).
• Provide transparency and reporting to the Information Security Steering Board (ISSB), the Solvd Board of Management (BoM), and the Group CISO Risk Management & Compliance
• Manage the annual Information Security Self-Assessment process, consolidate results, and track mitigation progress.
• Ensure compliance with applicable regulations (NIS2, DORA, GDPR, the Cyber Resilience Act) and customer obligations.
• Act as the primary interface for internal and external auditors, and for Allianz Group IS. Incident Management & Resilience
• Oversee the incident reporting and escalation framework; ensure Group-level transparency and timely communication.
• Lead post-incident reviews and lessons-learned sessions across entities, incorporating lessons from sector-relevant ransomware and data-exposure incidents. Identity & Access Management (IAM) Governance
• Define the IAM Target Operating Model and ensure consistent implementation across entities.
• Establish governance for identity lifecycle, privileged access, and access certification. Third-Party Cyber Risk Management
• Oversee the Third-Party Security Framework, including due diligence, onboarding, and monitoring of suppliers.
• Coordinate third-party security assessments and ensure appropriate supplier security requirements are implemented. Culture, Awareness & Leadership
• Foster a security-conscious culture across all Solvd entities through awareness campaigns, training, and leadership engagement.
• Build and maintain strong partnerships with local security leads and key stakeholders (IT, Risk, Data Privacy, Compliance, Legal).
• Represent Solvd inGroup security committees and working groups.

• 6+ years in information security, risk, or IT governance roles, with proven experience in multinational organisations, ideally spanning automotive, insurance, or another regulated industry.
• Strong understanding of regulatory frameworks (NIS2, DORA, GDPR, ISO 27001, the Cyber Resilience Act).
• Experience in defining and implementing security governance structures in federated organisations.
• Hands-on experience with GRC platforms (Archer or equivalent) for control assurance, risk registers, and evidence management, including automation of workflows across systems such as SharePoint, ServiceNow, Jira, SuccessFactors, or comparable IAM/ITSM tools.
• Proven track record in stakeholder management at C-level and with external regulators or auditors.
• Fluent in English (German advantageous).
• Relevant certifications: CISM, CISSP, ISO 27001 Lead Auditor/Implementer preferred.

Key Competencies

• Strategic, structured, and pragmatic mindset.
• Strong collaboration skills — capable of influencing without direct authority.
• Clear communicator, able to translate technical risk into business language.
• High integrity, resilience, and leadership under pressure.
• Continuous improvement and results-driven approach.

What we offer

Our employees play an integral part in our success as a business. We appreciate that each of our employees are unique and have unique needs, ambitions and we enjoy being a part of their journey. We are there to empower and encourage you with your personal and professional development ensuring that you take controlby offeringa large variety of courses and targeted development programs.All that in a global environment where international mobility and career progression are encouraged. Caring for your health and wellbeing is key priority for us. This is why we build Work Well programs to providing you with peace of mind and give the flexibility in planning and arranging for a better work-life balance.

Security Strategy & Governance