Senior Project Manager (m/f/d) Information Security

Salary: 65.000 - 105.000 € per year

Requirements:

Completed Bachelors or Masters degree in IT, Business Informatics, Cybersecurity, Engineering, or a comparable qualification; additional information security training or certifications are an advantage

Several years of professional experience in information security and its regulatory environment

Experience in project management and international environments, including projects with more than 10 people and budget responsibility, and experience with IT and cybersecurity frameworks and regulations such as CRA, NIS2, NIST CSF, ISO 27001, and IEC 62443

Strong understanding of product and OT security, including embedded systems, firmware, software, and mobile apps

Ability to translate complex regulatory requirements into pragmatic technical measures

Reliable, precise, independent, and goal-oriented working style

Fluent English and German, with appropriate communication skills and intercultural competence

Responsibilities:

Take central responsibility for our companys cyber, product, and production security

Ensure regulatory requirements, particularly those defined by the Cyber Resilience Act (CRA) and NIS2, are translated into robust, practical processes and technical measures that protect our production environments, connected devices, and IT/OT infrastructures

Take end-to-end responsibility for implementing the CRA across our company

Translate regulatory requirements into practical roadmaps, security processes, policies, and control mechanisms

Coordinate relevant departments, including Cybersecurity, IT Architecture, Product Development, Compliance, Legal, and Quality Management

Develop and manage roadmaps, implementation paths, and maturity concepts, taking technical and organizational dependencies into account

Conduct gap analyses, risk assessments, and conformity evaluations, derive measures, and prioritize them based on risk

Monitor regulations and evaluate new requirements and their impact on systems, processes, and products

Represent our company to authorities, auditors, and certification bodies, including preparing for audits

Communicate the current status transparently to senior management, project committees, and technical stakeholders

Contribute to the overall security posture of our corporate group as a key member of the Group Information Security Office under the CISO

Technologies:

Embedded

Firmware

Mobile

Security

Project Manager

More:

We offer hybrid work, including the option to work temporarily from a country within the European Union. You will join our fast-growing, agile, and dynamic team, which challenges established routines and helps transform the Vaillant Group into a data-informed business. We also offer the opportunity to purchase additional vacation days for an extended break.

last updated 39 week of 2026