Cyber Security Analyst (m/f/x)

Das ist der Job

Our philosophy is: "Feel Good, Do Good", because only those who feel good can give good things back.

Darum lohnt es sich

An important part of our corporate philosophy is our involvement in social projects around the world.To strengthen our team, we are offering the following permanent full-time position (40 hours per week) at Hamburg HQ at the earliest possible date:Cyber Security Analyst (m/f/x)In your future role, you are responsible for supporting the confidentiality, integrity, and availability of Yogi’s information systems across European operations.

The Cyber Security Analyst works closely with global security leadership, regional IT teams, and EU business stakeholders to ensure security requirements are effectively implemented and sustained.What are your Responsibilities?Monitor, analyze, and respond to security alerts, incidents, and suspicious activity across EU systemsAdminister and support endpoint, identity, and access security controls in alignment with global standardsPerform routine access reviews, privilege audits, and system hardening activitiesInvestigate reported security issues and coordinate resolution with internal teams and external partners.Support implementation and ongoing operation of ISO 27001 controls within EU operationsContribute to NIS2 compliance activities, including documentation, risk assessments, and control mappingAssist with GDPR-related security measures, audits, and regulatory inquiriesParticipate in security risk assessments, tabletop exercises, and incident response simulationsMaintain security documentation, operational procedures, and technical recordsContribute to global security improvement initiatives, tooling evaluations, and architecture enhancementsWhat do we expect?Bachelor’s degree in information security, Computer Science, or related field, or equivalent vocational trainingMinimum of 3–5 years of experience in cyber security, systems administration, or infrastructure with a security focusStrong understanding of information security principles and risk managementFamiliarity with endpoint security, vulnerability management, and incident response processesPrior exposure to ISO 27001, NIS2, GDPR compliance experiences preferredKnowledge of Microsoft security ecosystem (Entra ID, Defender, Microsoft 365 security tools)Familiarity with endpoint protection, identity lifecycle management, and security monitoring toolsSecurity certifications (ISO 27001, CISSP, CISM, Security+) are an advantageStructured, analytical, and risk-aware mindsetAbility to work independently and manage competing prioritiesStrong organizational, documentation, and time management skillsExcellence in German and fluency in business English, spoken and writtenResume in EnglishWhat do we offer?A varied and exciting range of responsibilitiesCollaboration in the diverse and interdisciplinary day-to-day work of the IT TeamOne social day per year to give something back to the environment or societyPerformance-related compensation packageAttractive additional benefits such as Deutschlandticket, bike leasing, and a corporate benefits programCelebrating joint successes and having fun at company eventsA multicultural and international working environmentOpportunity for mobile working, workation, and sabbaticalWorkplace in Hamburg with fresh fruit, good coffee, and the best teaWe look forward to receiving your detailed and complete application documents including the following content:CV in EnglishEarliest possible start date and notice periodYour salary expectations (gross annual salary)Send your documents either by e-mail with the subject "CSA" to career@yogiproducts.com or use the "Apply now" button.Discretion and the protection of your data are a matter of course for us!

In Germany and Europe, YOGI TEA GmbH has been the leading supplier of Ayurvedic herbal and spice teas from controlled organic cultivation for over 50 years. This role provides hands-on security operations, regulatory compliance support, and incident response while aligning with globally defined cybersecurity standards and governance.