(Senior) Cyber Risk Manager (m/f/d)

EOS Holding GmbH; Hamburg; Vor Ort; EUR 60.000 - 90.000; Vollzeit

Zusammenfassung

A leading IT services company in Hamburg is looking for a professional to develop and improve their global IT and Cyber Risk Management framework. You will assess and translate both cyber and IT risks into actionable insights while creating standardized assessments to support local organizations. The ideal candidate will have a degree, at least 5 years of experience in relevant fields, and solid knowledge of cybersecurity frameworks. Fluency in English is required, German skills are a plus.

Qualifikationen

• Minimum 5 years of relevant professional experience.
• Solid experience with cybersecurity frameworks (e.g., NIST CSF, ISO 2700x).
• Strong background in risk management and internal controls.

Aufgaben

• Developing and improving the IT and Cyber Risk Management framework.
• Assessing cyber and IT risks and translating them into insights.
• Creating standardized risk assessments for globally used technologies.

Kenntnisse

Cybersecurity frameworks

Risk management

Stakeholder communication

Network security

Cloud security

DevOps / DevSecOps

Ausbildung

Degree in relevant field

Jobbeschreibung

Do you want to make a difference, network with EOS colleagues across borders and scale secure IT services and products globally? Then you've come to the right place at EOS Group! We automate financial transactions and communication processes with the help of modern technologies. After all, excellent business processes start with secure IT – in 24 countries across Europe.

This is the job:

• Developing and continuously improving the global IT and Cyber Risk Management framework, ensuring consistency across the EOS Group.
• Assessing cyber and IT risks in a business-oriented manner, translating technical and regulatory risks into clear management-relevant insights.
• Driving the transition from qualitative risk assessments towards measurable and comparable risk evaluations.
• Creating standardized risk assessments, templates and catalogs for globally used technologies to reduce duplication of effort in local entities.
• Enabling and advising local organizations through training, guidance and methodological support, rather than pure control.
• Acting as a trusted advisor to IT, Compliance and Management stakeholders – including senior and executive levels.
• Supporting compliance- and regulation-driven requirements pragmatically and sustainably, in alignment with national and international standards.

This is what you bring to the table:

• You have successfully completed your studies and minimum 5 years of relevant professional experience. Properly qualified career changers are also welcome!
• Solid experience with cybersecurity frameworks (e.g. NIST CSF, ISO 2700x)
• Strong background in risk management and internal controls (regulated environments are a plus)
• Broad technical understanding (network & cloud security, DevOps / DevSecOps)
• Consultant mindset with strong communication, moderation and stakeholder skills
• Structured, independent and solution-oriented working style
• Fluent English; German skills are a plus