Senior Cybersecurity Risk Manager (f/m/d)

Deutsche Börse AG; Frankfurt; Vor Ort; EUR 70.000 - 100.000; Vollzeit

Zusammenfassung

A leading financial services company is looking for a Cyber Risk Management expert to enhance its Information Security Risk Management team in Frankfurt. This role involves consulting on risk assessment, managing service delivery, and contributing to key cybersecurity projects. The ideal candidate will hold a Master's degree in a relevant field with over 5 years of experience in IT risk management. You will work in a dynamic environment, leveraging your strong analytical and communication skills to build stakeholder trust and achieve project objectives.

Qualifikationen

• 5+ years of experience in IT risk management, Cybersecurity, GRC, IT Audit or similar.
• Certifications like CISM, CRISC, CISA, ITIL, PMP or similar are an advantage.
• Strong planning and organization skills.

Aufgaben

• Consult departments and management on Cybersecurity Risk Management matters.
• Manage and lead the Information Risk Management service delivery.
• Contribute to strategic Cyber Security projects like Cloud Security.

Kenntnisse

Analytical skills

Critical thinking

Communication skills

Stakeholder management

Ausbildung

Master’s degree in Information Technology, Cybersecurity, Business Informatics or comparable education

Tools

ISO/IEC 2700x

NIST

GRC frameworks

Jobbeschreibung

Your career at Deutsche Börse Group

The Group Security department directly contributes to execution of the Deutsche Börse Group cybersecurity strategy. As a central service provider for the Group entities, Group Security is responsible to protect information assets in terms of safety, integrity, confidentiality, authenticity and availability by enforcing information security controls based on the relevant regulatory requirements and the international standards like ISO 2700x-series on the Information Security Management System.

Area of work:

In your new position, you will have a unique opportunity to be part of an expanding department at the heart of a dynamic global business.The Information Security Risk Management team is responsible for enforcing the Information Security Framework in close collaboration with CISO and other central functions such as Group Risk, Compliance Management and Data Privacy.
In this role, you will be focused on Cyber Risk Management, our core competence, consulting our business partners and management on IT Security Risk Management matters. Beside that you will support various Information Security related projects ensuring robustness and the state-of-the-art solutions compliant with the regulatory requirements and following the best industry practices. Your strong interpersonal skills with ability to build trust with business and technology stakeholders at all levels will be the driving force behind your work in our friendly, co-operative and supportive environment.

Your responsibilities:

• You consult the departments and management on Cybersecurity Risk Management matters.
• You manage and lead the Information Risk Management service delivery.
• You consult Business Owners on the Cybersecurity Risk Assessments, assuring proper risk identification and assessment in accordance with the Information Security Framework, and monitoring the risk remediation.
• You contribute to strategic Cyber Security projects like Cloud Security.
• You develop and maintain the Information Risk Management methodology - process - tooling to meet the business strategy, regulatory requirements and the industry best practices.
• You maintain trusted relationships with our business stakeholders, e.g. Risk Owner(s), Chief Information Security Officer, Compliance Officer(s), Technical Information Security Officer(s), and Internal/External Audit.

Your profile:

• Master’s degree in Information Technology, Cybersecurity, Business Informatics or comparable education.
• 5+ years of experience in IT risk management, Cybersecurity, GRC, IT Audit or similar.
• Certifications like CISM, CRISC, CISA, ITIL, PMP or similar is an advantage.
• Knowledge of general legal and regulatory frameworks in the financial industry, for example DORA, NIS2, and industry standards like ISO/IEC 2700x or NIST.
• Strong analytical skills, critical thinking, ability to identify problems and propose solutions.
• Autonomous and resilient, with strong planning and organization skills.
• Exceptional communication and stakeholder management skills, both verbal and written in English.