{"id":4022925,"url":"https://alion.io/job/msv-multicall-interim-information-security-nis2-lead","title":"Interim Information Security NIS2 Lead","company":{"id":4528120,"name":"MSV Multicall","domain":"msv-multicall.com","url":"https://alion.io/company/msv-multicall","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ukraine"],"countries":["UA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Airtable","optional":false},{"name":"ISO 27001","optional":false}],"status":"live","first_seen_at":"2026-11-10T15:11:49Z","employer_posted_date":null,"last_verified_at":"2026-11-10T15:11:49Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"What it’s about NeXtWind operates and repowers wind farms in Germany, with a growth target of 3 GW by 2028. As an operator of energy infrastructure, we are classified as an \"entity of particular importance\" under the NIS2 Directive and the German IT Security Act (BSIG), and we have been registered with the Federal Office for Information Security (BSI) since March 2026. For us, information security is not a side issue—it is a mandatory requirement. We are looking for an experienced professional to join us for a period of several months to take ongoing responsibility for information security and NIS2 compliance within our Data & IT team, ensuring continuity in this function. IT operations (infrastructure, Microsoft 365 administration, and support) are managed by a separate Corporate IT role, which will join the team starting in December 2026. Your focus will be on security, compliance, and governance, while working in close collaboration with the Corporate IT team. We are not looking for someone who needs a long onboarding process to understand what needs to be done. We need someone who can identify critical issues within the first week, propose priorities, and deliver results independently. \n\nYour responsibilities 1. NIS2 obligations and reporting \n\n You will serve as the primary point of contact for the BSI, ensuring that NIS2 reporting deadlines (24 hours, 72 hours, and one month) are met.\n\n You will refine our reporting processes and incident response plan, ensuring they are operational and well-practiced—including conducting a tabletop exercise with the executive management team.\n\n You will assess security incidents and initiate statutory reporting whenever necessary. 2. ISMS, risk management, and roadmap \n\nYou will manage the 2026/27 security roadmap, prioritizing initiatives by assigning owners and setting deadlines. \n\nYou will drive the development of our Information Security Management System (ISMS), including defining roles and committees, establishing a reporting cadence, and maintaining the risk register. The goal is the reliable fulfillment of NIS2 obligations.\n\n You will implement the mapping of measures for NIS2/BSIG and maintain a verifiable record of the implementation status. 3. Governance and Reporting \n\nYou will prepare the quarterly InfoSec report for the management team.\n\n You will coordinate IT security policies and security requirements for service providers with our external legal counsel. \n\n You will address inquiries regarding information security from investors, insurers, and auditors. \n\n You will assign security-related work packages to Corporate IT and external service providers, and provide technical sign-off upon their completion. 4. Documentation and Handover \n\n You will document security-related knowledge—such as incident reporting chains, responsibilities, and processes—to ensure it is not dependent on a single individual, and you will provide an organized handover to the permanent successor at the end of your assignment. Overview of Ongoing Tasks Frequency Task Ongoing Evaluate security incidents, prepare and submit statutory notifications to the BSI (Federal Office for Information Security), and serve as the point of contact for the BSI. Weekly Check-in with the team lead (priorities, pending tasks, blockers); maintain the task list in Airtable. Monthly Coordinate with Corporate IT and service providers on security-related topics. Quarterly Prepare the InfoSec report for management; update the risk register. Annually Conduct risk analysis, facilitate a tabletop exercise with management, review policies, and develop a roadmap for the following year. As needed Address inquiries regarding information security arising from due diligence processes, investors, insurers, or auditors. Key Focus Areas for the First 90 Days \n\nWeeks 1–2: Onboarding, access provisioning, and gaining an overview of pending tasks and deadlines; ensuring a clear understanding of the security incident reporting chain and confirming your availability in the event of an emergency. \n\nBy Day 30: The status of reporting processes and the incident response plan has been reviewed and is operational; outstanding mandatory tasks have been prioritized and scheduled.\n\n By Day 60: The ISMS kick-off and security roadmap have been aligned; the risk register and the mapping of NIS2-related measures have been updated.\n\nBy Day 90: A tabletop exercise has been conducted, an InfoSec report has been prepared, and the documentation and handover plan for the permanent successor are in place. Your Profile What you bring to the table \n\nSeveral years of experience in IT security, with responsibility for compliance and risk management. \n\nPractical experience with NIS2/BSIG (implementation, not just theoretical knowledge). \n\nExperience with incident response, reporting processes, and the development or further evolution of an ISMS.\n\n A solid understanding of Microsoft 365 security, enabling you to define requirements and provide technical sign-off on implementations carried out by Corporate IT. \n\nyou work independently and reliably, meet deadlines, maintain thorough documentation, and drive tasks to completion. You provide proposed solutions, not just status updates. \n\nYou are able to explain security topics in an accessible way to executive management and business departments. \n\nFluent in German, with a good command of English. Available on short notice. An advantage \n\nExperience in the energy sector or within a critical infrastructure (KRITIS) environment.\n\n Certification as an Information Security Officer; familiarity with ISO 27001/27005 methodologies.\n\n Previous experience in interim or project-based roles that included a clear handover to a permanent successor. Collaboration You will work closely with the Team Lead for Data & Operations Platform and serve as the point of contact for executive management, the legal department, external legal counsel, IT service providers, and auditors. The Corporate IT function is responsible for infrastructure.","description_format":"text","description_chars":6039,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-11-10T15:41:35Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["seen:0","win:early"],"computed_at":"2026-11-10T17:55:49Z"},"pay":null,"html_url":"https://alion.io/job/msv-multicall-interim-information-security-nis2-lead","json_url":"https://alion.io/job/msv-multicall-interim-information-security-nis2-lead.json","meta":{"generated_at":"2026-11-10T17:55:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7231,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4528120},"rest":"https://alion.io/mcp/rest/get_company?id=4528120"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmsv-multicall-interim-information-security-nis2-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmsv-multicall-interim-information-security-nis2-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmsv-multicall-interim-information-security-nis2-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/msv-multicall-interim-information-security-nis2-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmsv-multicall-interim-information-security-nis2-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4022925}},{"tool":"search_jobs","arguments":{"company":"msv-multicall.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4022925},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}