IT Security Governance & Risk Professional

Your Key Responsibilities

• Design, establish and continuously improve the IT security risk management framework.
• Plan and conduct IT security risk assessments in close collaboration with relevant business and technical stakeholders, and maintain and enhance the IT risk register.
• Design, implement and optimize IT security processes, policies and requirements.
• Contribute to the development and implementation of the global IT security strategy.
• Define and operate processes and IT solutions for comprehensive security assessments of new and existing IT applications and services.
• Define and continuously improve IT security controls in line with international standards, including NIST and ISO/IEC 27001, and initiate their implementation.
• Support internal and external investigations, audits and risk assessments.

Your Qualifications

• University degree in computer science, business information systems or a related field, ideally with a relevant specialization; alternatively, equivalent vocational training combined with relevant professional experience.
• Several years of professional experience in IT security and risk management, or an equivalent level of in-depth expertise in these areas.
• Strong knowledge of security methodologies, frameworks and best practices, including ISO/IEC 27001, NIST SP 800-82, TISAX and the NIS2 Directive.
• Excellent analytical skills, with the ability to interpret complex requirements, translate them into effective processes and continuously improve existing processes.
• Strong consulting and communication skills, combined with a structured, proactive and self-reliant approach to work.
• High motivation and adaptability to thrive in a global, agile working environment.
• Advanced to expert-level English proficiency.