Manager IT-Security (f/m/d) - Vulnerability Management & Pentesting

Manager IT-Security (f/m/d) - Vulnerability Management & Pentesting

IT / Essen Headoffice / Hybrid / Vollzeit / iSE02706

Welcome to ista

At ista, we support property owners and managers in making their buildings fit for the future and kind to the planet. That includes tracking and billing energy consumption in a way thats easy to grasp, to help save energy and cut CO2 emissions. With over 6,600 employees in 21 countries, were committed to making it happen. Join us and help shape tomorrow, secure in the knowledge that youre part of a successful company that also offers you the flexibility of agile working practices.

Heres what you can look forward to

You drive the continuous development of our technical Vulnerability and Exposure Management capabilities and contribute to the sustainable reduction of security risks across the organization

You operate, optimize, and further enhance our Tenable-based security tool landscape, including dashboards, reporting, training initiatives, and KPI-driven analytics

Through the analysis of vulnerabilities, misconfigurations, and security risks across IT systems, applications, cloud environments, and infrastructure, you derive effective remediation strategies and risk mitigation measures

You lead the planning and coordination of penetration testing activities across web, API, cloud, mobile, and infrastructure environments, helping to proactively identify and mitigate security vulnerabilities

Close collaboration with Tribes, Squads, Product Owners, and IT Operations teams enables you to support risk prioritization, SLA compliance, and the sustainable implementation of remediation measures

You manage and optimize processes related to security exceptions, risk acceptances, and compensating controls, while embedding security requirements early into development and operational processes, particularly in areas such as Secure Development Lifecycle, third-party components, container security, and cloud security

Working closely with internal and external stakeholders, you prepare management-ready security insights and represent IT Security in projects, technical discussions, and cross-functional initiatives

What we require of you

Several years of experience in IT Security, ideally with a focus on Vulnerability Management, Exposure Management, Cloud Security, or Security Operations, form the foundation of your profile

A solid understanding of modern IT and cloud architectures, identity and access management, software development, and operational IT processes enables you to navigate complex security environments with confidence

Hands-on experience with industry-leading security tools such as Tenable, Burp Suite, Nmap, Nessus, or OWASP ZAP allows you to transform security data into meaningful analyses, reports, and actionable recommendations

Technical, regulatory, and internal security requirements are translated into pragmatic processes, effective controls, and sustainable security measures

In-depth knowledge of common attack techniques, vulnerabilities, and corresponding countermeasures, combined with practical experience in conducting web, API, cloud, and infrastructure penetration tests, rounds out your technical expertise

A structured, analytical, and solution-oriented mindset, paired with the ability to communicate complex topics clearly and effectively to different audiences, distinguishes your way of working

Strong initiative, consulting skills, and a collaborative mindset enable you to thrive in an international environment. Professional fluency in English is essential, while German language skills are considered an advantage