CYBER SECURITY RISK CONSULTANT (D/F/M)

Your qualifications:

• The work task requires knowledge and skills that are generally acquired through a relevant, completed degree programme of up to 4 years‘ duration in the field of engineering, computer science, cybersecurity or comparable degree programmes and related subject-specific additional qualification or through a relevant, completed degree programme of more than 4 years’ duration with a degree or completed vocational training with a corresponding, particularly extensive subject-specific additional qualification. The overall required knowledge and experience may have been acquired in other ways.

• Fundamental knowledge and experience in the above listed tasks
• Deep understanding of major security and risk management frameworks (ISO 27001, ISO 27005, ISO 31000, NIST CSF, EBIOS RM, FAIR)
• Understanding of security technologies, controls, and best practices
• Ability to develop and maintain security policies, procedures, and standards
• Proven experience leading risk assessment projects and security initiatives, strong experience with risk assessment methodologies and qualitative risk analysis, knowledge of quantitative risk analysis and the associated calculation methods is a plus
• Knowledge of regulatory requirements across industries (Export Control, GDPR, NIS2, Defense, EASA Regulations) and experience with GRC platforms and risk management tools
• Exceptional ability to communicate complex security concepts to non-technical stakeholders
• Ability to advise the customer regarding his request and objectives and to build consensus among diverse stakeholders
• Cultural sensitivity for working with international teams
• German and English: negotiation level mandatory (speaking and writing)
• Willingness to travel domestically and abroad