CYBER SECURITY GRC SENIOR CONSULTANT (D/F/M)

Conduct regular information security risk assessments using qualitative and/or quantitative methods, develop security strategies in collaboration with internal teams and stakeholders and propose corrective measures for medium to big consulting projects; Develop and implement security policies and procedures for the entire organization, ensure that policies and procedures comply with cybersecurity regulations and best practices and raise awareness of security policies and train employees on best practices; Definition and monitoring of functional and technical mitigation plans, methodological and technical monitoring, data analytics and mathematical modeling; Plan and lead medium sized consulting projects and significantly participate to consulting projects of medium to big size; Apply consulting methods independently while documenting and presenting results internally and externally; Design and delivery of awareness and training to internal and external customers; Improvement of existing processes and toolings and involvement of technical experts to guarantee successful delivery and training of (junior) consultants; Regular advice to customers for possible further support (cross-/up-selling) and Bid preparation for small to medium sized projects or significant support for big sized projects; Conduct internal audits to verify compliance and recommend improvements if necessary; Collaboration in the preparation of offers and company presentations; Taking on functional and/or project-related tasks in projects (e. g. technical project planning, topic responsibility)

Responsibilities

Conduct regular information security risk assessments using qualitative and/or quantitative methods, develop security strategies in collaboration with internal teams and stakeholders and propose corrective measures for medium to big consulting projects; Develop and implement security policies and procedures for the entire organization, ensure that policies and procedures comply with cybersecurity regulations and best practices and raise awareness of security policies and train employees on best practices; Definition and monitoring of functional and technical mitigation plans, methodological and technical monitoring, data analytics and mathematical modeling; Plan and lead medium sized consulting projects and significantly participate to consulting projects of medium to big size; Apply consulting methods independently while documenting and presenting results internally and externally; Design and delivery of awareness and training to internal and external customers; Improvement of existing processes and toolings and involvement of technical experts to guarantee successful delivery and training of (junior) consultants; Regular advice to customers for possible further support (cross-/up-selling) and Bid preparation for small to medium sized projects or significant support for big sized projects; Conduct internal audits to verify compliance and recommend improvements if necessary; Collaboration in the preparation of offers and company presentations; Taking on functional and/or project-related tasks in projects (e. g. technical project planning, topic responsibility)

Requirements

Relevant completed degree in engineering, computer science, cybersecurity or comparable, with extended subject-specific qualification (or equivalent knowledge/experience); Extensive knowledge and experience in the listed tasks; Deep understanding of major security management frameworks (ISO 2700X, BSI IT-Grundschutz, NIST CSF, IT/OT Governance, ISO 31000, risk methodology); Deep understanding of security technologies, controls, and best practices; Ability to develop and maintain security policies, procedures, and standards; Proven extensive experience leading Governance projects and security initiatives; Extensive knowledge of regulatory requirements across industries (NIS2, Export Control, GDPR, Defense, EASA Regulations); Proven experience with GRC platforms and risk management tools; Exceptional ability to communicate complex security concepts to non-technical stakeholders; Strong presentation and report writing skills for executive-level audiences; Strong negotiation and influence skills; Stakeholder management at executive level; Ability to advise the customer regarding request and objectives and build consensus among diverse stakeholders; Cultural sensitivity for working with international teams; German and English at negotiation level (speaking and writing); Willingness to travel domestically and abroad; Security clearance required or must be issued by responsible authorities; Awareness of potential compliance risks and commitment to act with integrity

Nice to have

Strong experience with ISMS implementation and security requirements at any level

Benefits

Mobile working and flexible working hours; Fair and attractive remuneration and special payments; 30 days' holiday and additional days off for special occasions; Intensive induction and expert support as part of onboarding with a personal mentor; Excellent training opportunities and promising development prospects; Attractive social benefits and offers including employer-financed pension scheme, employee share options, discounted car leasing, bike leasing, special conditions for insurance, employee benefits at cooperating companies; On-site facilities depending on location such as canteen and cafeteria, fitness studio, on-site kindergarten, company medical service and other health-related services