Senior Security Risk Manager (all genders)

Zalando SE; Berlin; Hybrid; EUR 60.000 - 100.000; Vollzeit

Zusammenfassung

An established industry player seeks a Senior Security Risk Manager to enhance security governance and compliance. In this pivotal role, you will safeguard trust for customers and stakeholders by managing security risks and ensuring adherence to regulations. You will be instrumental in developing security policies and frameworks while measuring the effectiveness of risk management efforts. This role offers a dynamic environment with a hybrid working model, allowing you to thrive in a collaborative setting. Join a forward-thinking company committed to inclusivity and professional growth, where your expertise will make a significant impact.

Leistungen

Employee shares program

40% off fashion products

2 paid volunteering days

Hybrid working model

Work from abroad for 30 days

27 days of vacation

Relocation assistance

Family services

Health and wellbeing options

Mental health support

Qualifikationen

• 6+ years in Security Governance, Risk and Compliance roles with strong communication skills.
• Experience with security and privacy regulations like GDPR, NIST CSF, and PCI DSS.

Aufgaben

• Manage and improve the information security compliance framework.
• Monitor compliance with regulations like DORA, GDPR, and PCI-DSS.

Kenntnisse

Security Governance

Risk Management

Compliance Monitoring

Communication Skills

Attention to Detail

Analytical Proficiency

Ausbildung

6+ years of experience in Security Governance, Risk and Compliance

Security certifications (CISSP, CRISC, CISM, ISO 27001)

Tools

NIST CSF

GDPR

PCI DSS

SOC 2

Secure Control Framework (SCF)

Jobbeschreibung

Senior Security Risk Manager (all genders)

Senior Security Risk Manager (all genders)

Apply locations Berlin time type Full time posted on Posted Yesterday job requisition id 2717349

THE ROLE & THE TEAM

As a Senior Security Risk Manager in the Information Security - Security Risk & Governance Team, you will be at the forefront of safeguarding trust for our customers, stakeholders, and employees. By expertly identifying, assessing, and managing security risks, you will directly influence the security posture of our internal applications and third-party relationships, becoming the go-to expert and a key architect of our evolving Security Risk Management process.

INCLUSIVE BY DESIGN

At Zalando, our vision is to be the leading pan-European ecosystem for fashion and lifestyle e-commerce - one that is inclusive by design. We only assess candidates based on qualifications, merit, and business needs. We welcome applications from people of all gender identities, sexual orientations, personal expressions, racial identities, ethnicities, religious beliefs, and disability statuses. We only want to know why you’re great for this role, so please avoid including your picture, age, and marital status in your CV as well.

We want to provide you with a great candidate experience. Please feel free to inform us of any accommodations you may need, so we can best support and assist you throughout the hiring process.

WHAT WE’D LOVE YOU TO DO (AND LOVE DOING)

• Manage Security Compliance: Implement, maintain, and continuously improve the information security compliance framework.
• Ensure Regulatory Adherence: Monitor, enforce, and advise on compliance with DORA, GDPR, PCI-DSS, SOC2, NIST CSF, and other relevant regulations.
• Develop Security Governance: Contribute to the creation, review, and upkeep of information security policies, procedures, and controls.
• Drive Risk Management: Design, implement, and maintain the information security risk management framework for projects, systems, and processes.
• Measure Risk Management Effectiveness: Develop KPIs to track the effectiveness of risk management efforts.
• Report to Leadership: Prepare and present regular reports on security risks, compliance, and improvements.

WE'D LOVE TO MEET YOU IF

• You have 6+ years of experience working in Security Governance, Risk and Compliance functions.
• You demonstrate strong communication skills and good interpersonal skills. You can communicate security risk-related concepts to technical and nontechnical audiences.
• You have experience in interpreting and implementing security and privacy regulations and frameworks (e.g., NIST CSF, GDPR, ISO 2700x, SOC 2, PCI DSS, NIS2, CRA) into actionable security operational requirements.
• You have a familiarity with the Secure Control Framework (SCF).
• You have exceptional attention to detail, strong program/project management skills, analytical proficiency, and experience in operationalizing and developing scalable security processes in complex environments.
• You have security certifications (e.g. CISSP, CRISC, CISM, ISO 27001 Lead Auditor/Implementer) as a plus.

OUR OFFER

Zalando provides a range of benefits, here’s an overview of what you can expect. Ask your Talent Acquisition Partner to learn more about what we offer.

• Employee shares program
• 40% off fashion and beauty products sold and shipped by Zalando, 30% off Lounge by Zalando, discounts from external partners
• 2 paid volunteering days a year
• Hybrid working model with up to 60% remote per week, actual practice is up to each team to best support their collaboration
• Work from abroad for up to 30 working days a year
• 27 days of vacation a year to start for full-time employees
• Relocation assistance available (subject to prior agreement)
• Family services, including counseling and support
• Health and wellbeing options (including Wellhub)
• Mental health support and coaching available
• Drive your development through our training platform and biannual peer-to-peer review