In this senior role, you will steer and take ownership of our group-wide Enterprise Risk Management and Internal Control System (ICS) within a dynamic, international environment. Acting as a trusted strategic advisor to senior management, you will play a key role in safeguarding corporate decisions, enhancing risk governance, and driving the digital transformation of our internal controls.
Tasks
- Drive the continuous strategic development and enhancement of our risk and ICs methodologies, translating complex regulatory requirements into practical, efficient business processes.
- Lead process and control design by analyzing, mapping, and modeling core processes, as well as implementing and monitoring robust control frameworks.
- Oversee risk and ICs governance, preparing comprehensive risk reporting for the Executive Board and Supervisory Board, including quarterly updates, ad-hoc reports, and the annual risk and opportunity report.
- Identify, evaluate, and monitor operational and strategic risks, validating reported risks, identifying interdependencies, and designing effective mitigation measures.
- Facilitate and lead Risk Committees, risk assessments, and ICs workshops with executive leadership and international business units.
- Maintain and update governance guidelines, manuals, and templates in alignment with national and international standards.
- Act as a primary contact and trusted advisor for internal business divisions, senior leadership, and external auditors on all risk and ICs matters.
- Steer the functional enhancement, administration, and continuous rollout of our dedicated Risk & ICs management software tools.
- Provide functional leadership and mentoring to junior team members, working students, and interns.
Qualifications
- University degree in Business Administration, Economics, Information Systems, Business Law, or a comparable field of study.
- At least 5 years of solid, relevant professional experience in Enterprise Risk Management, ICs, auditing, or consulting within complex organizations, ideally in a publicly listed corporate environment.
- Sound working knowledge of established risk and control frameworks (such as COSO, COSO ERM, ISO 31000, IDW PS 340, IDW PS 981).
- Proven experience in end-to-end business process modeling, process analysis, and the implementation of effective internal control frameworks.
- Deep understanding of business and governance processes in listed companies, combined with a strong affinity for IT risk management.
- Strong analytical mindset, problem-solving skills, and confident communication when presenting to executive stakeholders.
- High degree of initiative, autonomy, and the ability to maintain clarity and structure in dynamic situations.
- Fluent business English and German language skills, both written and spoken, are required; additional languages are an advantage.
- Relevant professional certifications (e.g., in Risk Management, ICs, Information Security, or Compliance) are considered an asset.
Benefits
- Hybrid working model.
- Flexible working hours through trust-based working hours.
- At some locations a subsidized canteen and various free drinks.
- Modern office space with very good transport connections.
- Various employee discounts for activities and products.
- Employee events such as summer and winter parties, as well as workshops.
- Numerous training and development opportunities.
- Various health offers, such as sports and health courses.