Security Risk Manager

Boehringer Ingelheim Pharmaceuticals, Inc; Deutschland; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Benefits dieser Stelle

Comprehensive benefits and wellbeing package

Zusammenfassung

Boehringer Ingelheim Pharmaceuticals, Inc is seeking a Security Risk Manager based in Ingelheim. This role involves implementing Enterprise Security Risk Management programs and ensuring compliance with EU resilience legislation. The position features a hybrid work setup of approximately 3 days per week onsite.

The ideal candidate will have relevant qualifications or equivalent experience in Security Management and Risk Management, with the ability to assess risks across multiple domains and translate regulatory requirements into actionable controls.

Qualifikationen

• Experience delivering enterprise security risk management in complex environments.
• Strong experience in risk assessment and control design.
• Ability to translate regulatory requirements into actionable controls.

Aufgaben

• Support enterprise security risk management across the organization.
• Translate regulatory frameworks into practical controls and governance.
• Assess risks across cyber, physical, and operational domains.

Kenntnisse

Security Management

Information Security

Risk Management

Stakeholder Management

Data Analytics

Ausbildung

Relevant qualifications in Security Management or Risk Management

Jobbeschreibung

The Position

We are looking for a Security Risk Manager based in Ingelheim to deliver the implementation of Enterprise Security Risk Management programmes including EU resilience legislation (NIS2 and CER) and strengthen our organization's ability to manage disruption, protect critical services, and meet evolving regulatory expectations.

This position has a hybrid setup of approximately 3 days per week on site.

Tasks & Responsibilities

• Support the delivery of enterprise security risk management (ESRM) across the organization, embedding a consistent, risk‑based approach to identifying, assessing, and managing security risks to critical operations.
• Translate regulatory requirements, turning frameworks such as NIS2, CER, and related standards into practical controls, governance structures, and ways of working that integrate into day‑to‑day operations.
• Assess risks across cyber, physical, operational, and third‑party domains, ensuring a joined‑up, enterprise‑wide view of risks impacting critical services.
• Contribute to the design and implementation of security and resilience frameworks, including policies, standards, controls, and assurance processes that are practical and scalable.
• Provide clear, actionable insight to senior stakeholders on risk exposure, compliance posture, and prioritized mitigation actions.
• Embed security risk management into business operations, strengthening overall resilience and enabling risk‑informed decision‑making.

Requirements

• Relevant qualifications in Security Management, Information Security, Risk Management, or equivalent hands‑on experience. Additional qualifications in project management, auditing or related disciplines would be an advantage.
• Proven experience delivering enterprise security risk management across physical, cyber, and operational domains in complex or regulated environments including exposure to third‑party / supply chain risk management and critical service dependencies.
• Strong practical experience in risk assessment, control design, and implementation, with the ability to embed these into day‑to‑day operations and capability in data, analytics, and dashboarding to support risk‑based decision‑making.
• Experience translating regulatory and framework requirements (e.g. NIS2, CER, ISO, or similar) into actionable controls and governance.
• Track record of delivering cross‑functional risk or security initiatives, including audit support and assurance activities.
• Strong stakeholder management skills, with the ability to influence, challenge, and communicate risk clearly at all organizational levels.
• Experience driving change, transformation, or programme delivery in global organisations.

Benefits

We offer a comprehensive benefits and wellbeing package. Salary information will be shared during the recruitment process.

Equal Opportunity

Applications from persons with severe disabilities are warmly welcomed. In cases of equal qualifications, such applicants will be given preferential consideration in the selection process.