Master

Germany Information Security Lead (Ops and App infosec Security)

Germany Information Security Lead (Ops and App infosec Security)2021-11-15T06:08:25-05:00<p><strong>Infosec Regional Lead - Germany</strong></p> <p>Thoughtworks is a global software consultancy with an aim to create a positive impact on the world through technology. Our community of technologists thinks disruptively to deliver pragmatic solutions for our clients' most complex challenges. We are curious minds who come together as collaborative and inclusive teams to push boundaries, free to be ourselves and make our mark in tech.</p> <p><strong>What are the responsibilities and expectations of this role?&nbsp;</strong></p> <p><span style="font-weight: 400;">The Thoughtworks security team is looking for a new colleague in Germany! We are a </span><span style="font-weight: 400;">very</span><span style="font-weight: 400;"> distributed team, spread across the globe and cover a vast domain of knowledge -- </span><strong>everything</strong><span style="font-weight: 400;"> has a security angle!</span></p> <p><span style="font-weight: 400;">You'll be working in an all-round role, collaborating with the client accounts in Professional Services (PS) and Thoughtworks-internal operations functions (Ops) based in your region on a large number of topics to improve their overall security posture.&nbsp;</span></p> <p><span style="font-weight: 400;">You will be an early warning indicator around risk for your region’s leadership in the sense that you will be reporting to them and advising them on risks you perceive throughout the region, both in PS and Ops. You'll be part of a larger global and EU team identifying ways to scale security better within Thoughtworks.</span></p> <p><strong>Role responsibilities:</strong></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Regular collaboration with and assessments of client accounts for security and compliance risks and posture.</span></li> </ul> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Collaborate with other InfoSec team members to improve the overall security posture of Thoughtworks with a specific focus on Europe</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Collaborate with operations teams to support compliance and security risk needs</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Collaborate with regional comms and security community to run security awareness campaigns</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Support and handle security incident response process when incidents occur on regional accounts or teams</span></li> </ul> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Report to InfoSec and your regional stakeholders on security-related risks and posture</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Help shape the regional security community</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Collaborate with regional Head of L&amp;D on security capability initiatives</span></li> </ul> <p>&nbsp;</p> <p><strong>What kinds of skills, attitudes and experiences would one need to bring, to be an ideal fit for this role?</strong></p> <p><span style="font-weight: 400;">You'll bring:</span></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">A solid understanding of how software teams deliver value to our clients</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">A strong interest in learning the security domain and how security vulnerabilities translate into delivery risks&nbsp;</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">A strong interest in infrastructure and operations with one or more cloud vendors&nbsp;</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">While this is not a travel-heavy role, you need to be okay with going to a client site for a couple of days if support is needed, or to other offices during regular intervals.</span></li> </ul> <p><span style="font-weight: 400;">Traits we are looking for:</span></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Strong influencing skills in advocating for security best practices, especially at the levels of Thoughtworks and client leadership</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Ability to communicate effectively to different types of audiences</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Ability to categorize, visualize, and present findings to leadership</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Capable of self-management while following broad strategic objectives&nbsp;</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Organization of multiple concurrent streams of work with competing objectives</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Strong sense of commitment and delivery</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Being able to handle unplanned work</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Being able to handle feast-or-famine workloads (alternating phases with high and low workloads)&nbsp;</span></li> </ul> <p><span style="font-weight: 400;">What will you learn?</span></p> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Distributed collaboration skills</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Security (competencies)</span></li> <ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Threat Modeling</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Risk Management</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Technical and non-technical security measures</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Security in continuous delivery</span></li> </ul> <li style="font-weight: 400;"><span style="font-weight: 400;">Consulting skills</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Stakeholder Management</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">Understanding our business and priorities as part of the regional leadership team</span></li> <li style="font-weight: 400;"><span style="font-weight: 400;">How security works in an agile delivery model</span></li> </ul> <p style="color: white;">#LI-COE</p>ThoughtworksMunich, Hamburg, BerlinGermany