Project Information Security Manager (all genders)

About this role

Kapsch is one of Austria's most successful global technology companies. With its comprehensive ITS (Intelligent Transportation Systems) portfolio, Kapsch is actively addressing the challenges of the present and the future with intelligent mobility solutions in a wide range of application areas. As a family-owned company founded in 1892 and headquartered in Vienna, Kapsch can look back on 130 years of experience with the future.

We are looking for a proactive and detail-oriented Information Security professional to ensure security is embedded across our projects. In this role, you will analyse project-specific security requirements, perform risk and impact assessments, and design secure architectures aligned with internal frameworks and ISO/IEC 27000 standards. You will work closely with cross-functional teams, support bid processes, and ensure compliance with GDPR, contributing to the delivery of secure and resilient solutions across our global organization.

Your Responsibilities

• Ensure information security is addressed within projects (customer-facing/internal projects) by coordinating the implementation of appropriate (technical and/or organizational) security controls during project delivery.
• Analyse the security context of a project, manage security relevant customer inputs and project specific security requirements, and elaborate on the architectural security design for the project.
• Perform Business Impact Analysis (Threat and Information Security Risk Analysis) to quantify and assess risks for projects arising from the use of information-processing systems and digital communications.
• Develop a security architecture compliant with the internal security framework, but also with requirements of the ISO/IEC-27000 standards framework, for solutions implemented by Kapsch TrafficCom.
• Support bid teams by analysing and answering tender documents
• Ensure projects and delivered solutions are compliant with the General Data Protection Regulation (GDPR)....