(Senior) Cyber Risk Manager (m/f/d)

EOS Holding GmbH; Deutschland; Vor Ort; EUR 70.000 - 90.000; Vollzeit

Zusammenfassung

A leading global IT services company in Germany is looking for an experienced Cyber Risk Manager to develop and enhance its IT and Cyber Risk Management framework. The role involves assessing and translating risks into actionable insights while collaborating with IT, Compliance, and Management. Ideal candidates have significant experience in cybersecurity frameworks, risk management, and possess strong communication skills. You will support organizational requirements while ensuring compliance with international standards.

Qualifikationen

• Minimum 5 years of relevant professional experience.
• Strong background in risk management and internal controls.
• Fluent English; German skills are a plus.

Aufgaben

• Develop the global IT and Cyber Risk Management framework.
• Assess cyber and IT risks in a business-oriented manner.
• Drive transition to measurable risk evaluations.
• Create standardized risk assessments for technologies.
• Enable local organizations through training and guidance.
• Advise IT, Compliance, and Management stakeholders.
• Support compliance- and regulation-driven requirements.

Kenntnisse

Cybersecurity frameworks (e.g. NIST CSF, ISO 2700x)

Risk management

Stakeholder communication

Moderation skills

Network & cloud security

DevOps / DevSecOps

Ausbildung

Completed studies in a relevant field

Jobbeschreibung

Do you want to make a difference, network with EOS colleagues across borders and scale secure IT services and products globally? Then you've come to the right place at EOS Group! We automate financial transactions and communication processes with the help of modern technologies. After all, excellent business processes start with secure IT - in 24 countries across Europe.

This is the job:

• Developing and continuously improving the global IT and Cyber Risk Management framework, ensuring consistency across the EOS Group.
• Assessing cyber and IT risks in a business-oriented manner, translating technical and regulatory risks into clear management-relevant insights.
• Driving the transition from qualitative risk assessments towards measurable and comparable risk evaluations.
• Creating standardized risk assessments, templates and catalogs for globally used technologies to reduce duplication of effort in local entities.
• Enabling and advising local organizations through training, guidance and methodological support, rather than pure control.
• Acting as a trusted advisor to IT, Compliance and Management stakeholders - including senior and executive levels.
• Supporting compliance- and regulation-driven requirements pragmatically and sustainably, in alignment with national and international standards.

This is what you bring to the table:

• You have successfully completed your studies and minimum 5 years of relevant professional experience. Properly qualified career changers are also welcome!
• Solid experience with cybersecurity frameworks (e.g. NIST CSF, ISO 2700x)
• Strong background in risk management and internal controls (regulated environments are a plus)
• Broad technical understanding (network & cloud security, DevOps / DevSecOps)
• Consultant mindset with strong communication, moderation and stakeholder skills
• Structured, independent and solution-oriented working style
• Fluent English; German skills are a plus

Contact person

Nikolas von der Decken