Business Information Security Officer

Avnet

Business Information Security Officer serving as a strategic partner and managing cybersecurity at Avnet. Advising business units on risk management, compliance, and security measures.

Posted 6/9/2026full-timeRemote • 🇩🇪 GermanySeniorLeadWebsite

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Act as the primary Information Security advisor for assigned business units
Advise business leaders on cybersecurity, risk management, and compliance matters
Conduct risk and system assessments and recommend appropriate security controls
Translate technical risks into clear business impacts and actionable recommendations
Drive governance, risk, and compliance activities within the business units
Support vulnerability management, secure baseline adoption, and risk mitigation initiatives
Provide security expertise for customer engagements, sales activities, and audit processes
Support certification and regulatory compliance initiatives (e.g., ISO 27001, NIS2, CMMC, PCI DSS, GDPR)
Represent business interests within enterprise cybersecurity and IT discussions
Promote a risk-aware and security-focused culture across the organization

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Technology, Information Security, Business Information Systems, or a related field, or equivalent professional experience
Extensive professional experience (minimum 8 years in IT, including at least 4 years in cybersecurity, IT risk management, or information security)
Strong knowledge of information security, risk management, and governance frameworks (e.g., NIST, CIS)
Experience with compliance programs, audits, and regulatory requirements
Ability to communicate complex technical topics effectively to business leaders and executive stakeholders
Knowledge of modern IT architectures, cloud technologies, and DevSecOps practices is an advantage
Relevant certifications such as CISSP, CISM, or CRISC are preferred
Fluent English communication skills, both written and spoken

Benefits

Comp & perks

30 days of annual vacation plus additional special leave days (December 24th and December 31st are granted as fully paid additional days off)
Up to 10 days of Workation per year, allowing you to work remotely from approved locations
38.5-hour workweek with a flexible working time account
Flexible and hybrid working arrangements to support a healthy work-life balance
Complimentary supplementary health insurance through Allianz, covering benefits such as preventive healthcare, dental care, vision support, and more
Comprehensive group accident insurance coverage, including protection beyond working hours
Access to Wellpass membership for fitness, sports, and health-related activities
Option to participate in a Job Bike leasing program, including e-bikes and bicycles
Subsidized company pension scheme to support your long-term financial planning
Employer contribution to capital-forming benefits ( Vermögenswirksame Leistungen )
Employee Assistance Program (EAP) offering professional support for personal and professional matters
Two modern subsidized company cafeterias featuring fresh meal options and Barista coffee bars
Company-affiliated daycare center and kindergarten with preferential conditions for employees
A highly visible and strategically important role within an international environment
Close collaboration with business leaders, IT teams, and cybersecurity professionals worldwide
The opportunity to position cybersecurity as a business enabler and competitive advantage
Challenging and impactful work at the intersection of security, technology, and business strategy
Excellent opportunities for professional growth and international career development

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cybersecurityrisk managementcompliancevulnerability managementrisk assessmentsecurity controlsIT risk managementinformation securityDevSecOpsIT architectures

Soft Skills

communicationadvisoryleadershiporganizationalstakeholder engagementrisk awarenesssecurity culture promotion

Certifications

CISSPCISMCRISC