medac, a growing pharmaceutical company with more than 2,000 employees worldwide, is hiring an Information Security Expert (m/f/d) at its Wedel site near Hamburg. You will run and improve the global security infrastructure, design Zero Trust cloud architectures and lead group-wide IT security projects, with up to 60% remote work.
About medac
Business: Development, manufacturing, distribution and marketing of pharmaceuticals
Fields: Rheumatology, urology, haematology and oncology
Size: More than 2,000 employees worldwide
Goal: Improve patients’ quality of life
Benefits & Career Opportunity
Flexibility: Free time management and up to 60% remote in many areas
Leave: 30 vacation days plus vacation pay
Bonus: Success-based bonus for all employees
Extras: Company pension, VWL, Deutschlandticket subsidy, business bike leasing, canteens in Wedel and Tornesch
Position Overview
As Information Security Expert, you are responsible for the safe operation and continuous improvement of the global security infrastructure, including technical protection, operating standards and clear security documentation. You design secure cloud architectures under Zero Trust principles, carry out protection needs assessments, risk analyses and security architecture reviews, and prioritise measures using BSI IT-Grundschutz, the NIST Cybersecurity Framework and CISA goals. You also plan group-wide security projects, run internal and external audits, write security policies and standards, and advise network, infrastructure, cloud and application teams on hardening, vulnerability management, logging, monitoring and incident handling.
Why This Role Matters: Pharma is a regulated, high-value target for cyber threats, so security work here carries real weight. You work across the full security lifecycle, from governance to recovery, in a global setup, with remote flexibility, bonus participation and training through the medac Academy.
Key Responsibilities
Security Operations & Architecture
- Run and improve the global security infrastructure with technical protection, standards and documentation
- Design secure cloud architectures under Zero Trust principles, including identity, access, network and data protection controls
Risk & Compliance
- Carry out protection needs assessments, risk analyses and architecture reviews
- Plan and support internal and external audits and track findings
- Turn regulatory and contractual requirements into verifiable controls
Projects & Advice
- Plan and deliver group-wide IT security projects across the full lifecycle
- Advise teams on hardening, vulnerability management, logging, monitoring and incident handling
- Write and maintain security policies, standards and processes
Qualifications
Education & Experience
- Degree in business informatics, information security or comparable qualification with relevant practice
- Several years of operational and conceptual IT security experience, ideally in a regulated, international setting
Technical Skills
- Risk assessment and BSI IT-Grundschutz, NIST CSF and CISA knowledge
- Network, perimeter and cloud security: firewalls, segmentation, Azure or Google Cloud
- Windows and Linux security, endpoint security, EDR/MDR, vulnerability management and monitoring
- IAM, privileged access, MFA, Zero Trust and IDM system rollout
- Audits, incident response and ISO/IEC 27001 are a plus
Languages & Personal
- Confident German and English
- Analytical, independent work style
About medac
medac is a dynamically growing pharmaceutical company with more than 2,000 employees worldwide. It specialises in developing, producing, distributing and marketing pharmaceutical products in rheumatology, urology, haematology and oncology. Applications are welcome regardless of age, gender, identity, nationality, religion, origin or disability.
How to Apply: Apply online with the Apply button. For questions, contact Recruiting Manager Letizia Rothschuh at 04103 8006-8796 or l.rothschuh@medac.de. Check your spam folder after applying.
Who Should Apply?
- Security Engineers: With cloud and Zero Trust experience
- IT Security Consultants: Moving into an in-house role
- IAM Specialists: With group-wide rollout experience
- Audit and Compliance Professionals: With ISO 27001 knowledge
- Hamburg-Region Security Experts: Wanting 60% remote
Recently Opening Job👇
