IT Security Consultant (m/f/d)

- You will align and drive application security across group IT–managed and internally developed applications, collaborating closely with interdisciplinary development teams to ensure a secure end‑to‑end lifecycle - Your responsibilities will include managing regulatory compliance activities for NIS2, the Cyber Resilience Act and ISO / IEC 27001, enabling our organisation to meet high standards of cyber resilience with confidence - By creating technical concepts and solution designs, you establish robust application security architecture practices, including secure software development lifecycles, static and dynamic application security testing and software composition analysis - After analysing and evaluating business requirements, you take decisions and conduct security assessments with a special focus on Identity and access management, ensuring secure role‑based access control, multi‑factor authentication, identity federation and privileged access management - Together with group IT teams, you define and implement API and service security standards, leveraging OAuth 2.0, OpenID Connect, JSON Web Tokens and mutual transport layer security to protect critical interfaces - Your responsibilities will include contributing to vulnerability and patch management processes, threat modelling (STRIDE) and risk assessments (MITRE ATT&CK), shaping an environment that continuously evolves to counter emerging risks