Information Security & Cyber Resilience Consultant (m/f/d)

MeJuvante GmbH; Gau-Algesheim; On-site; EUR 90,000 - 130,000; Full time

Job summary

MeJuvante GmbH seeks an experienced consultant to review information security policies and controls for financial-sector clients. You will assess proposed changes for operational and cyber risk, and help implement resilience controls and tooling.

Responsibilities include planning threat-led testing under TIBER-EU, developing resilience strategies, and preparing evidence for supervisors and boards. You will advise stakeholders up to CISO and CRO levels in a permanent consultancy role.

Qualifications

• Review information security policies, controls and change requests.
• Assess what proposed changes do to operational and cyber risk before they ship.
• Develop and run security and resilience controls and tooling.
• Plan threat-led penetration testing under the TIBER-EU framework.
• Translate cyber resilience strategy into actionable controls.

Responsibilities

• Review policies and change requests for risk coherence.
• Assess impact of proposed changes on operational and cyber risk pre-implementation.
• Support implementation and day-to-day operation of resilience controls.
• Coordinate threat-led testing and risk management activities.
• Prepare evidence and reporting for supervisors, auditors and boards.

Skills

Policy analysis

Risk assessment

Security controls

Threat-led testing planning

Cyber resilience

Reporting to boards

Stakeholder advisory

Tools

TIBER-EU framework

Job description

Permanent consulting role for financial-sector clients who have to prove their resilience, not just claim it. You review policies and controls, judge what a proposed change does to operational and cyber risk, and help stand up the controls and tooling that make a recovery story credible. AI drafts the assessments; you own the verdict.

• Review information security policies, controls and change requests, and say plainly which ones do not hold
• Assess what a proposed change does to operational and cyber risk before it ships, not after
• Support the implementation and day-to-day running of security and resilience controls and tooling
• Plan and risk-manage threat-led penetration testing, including engagements run under the TIBER-EU framework
• Develop cyber resilience strategy and translate it into controls someone can actually operate
• Prepare the evidence and reporting that supervisors, auditors and boards ask for
• Advise client security, risk and audit stakeholders up to CISO and CRO level