Cyber Security Risk Manager (m/f/d)

BASF SE; Madrid; Híbrido; EUR 50.000 - 70.000; Jornada completa

Descripción de la vacante

BASF SE is seeking a Cyber Governance professional to manage the Cyber Security Framework, collaborate with the global data privacy team, and conduct risk assessments. The role requires a Bachelor's degree in IT, significant cybersecurity experience, and strong risk management skills. Employees benefit from a flexible work schedule, relocation assistance, and a supportive work environment.

Servicios

Flexible work schedule and home-office options

23 holiday days plus 5 additional days

Learning and development opportunities

Relocation assistance to Madrid

Formación

• 5-7 years of cybersecurity risk management experience.
• Experience with risk assessments and threat modeling.
• Relevant certifications such as CISSP or CISM are advantageous.

Responsabilidades

• Identify and prioritize risks to information assets.
• Establish cyber security control processes.
• Collaborate with data privacy organization and maintain a risk register.

Conocimientos

Risk Management

Cybersecurity

Data Protection Laws

Interpersonal Communication

Educación

Bachelor’s degree in computer science or IT

Herramientas

ISO 27001

ISMS

Descripción del empleo

Press Tab to Move to Skip to Content Link

WHAT YOU CAN EXPECT

You will be part of our Cyber Governance, Risk and Compliance Team, managing the Cyber Security Framework for the BASF Group. You will also work closely with our global data privacy organization.

• Identify, assess, and prioritize risks to BASF’s information assets, especially those used for processing personal data.
• Establish processes to ensure appropriate cyber security controls are in place to mitigate risks.
• Define group-wide cyber security governance standards based on a risk-based approach for systems, assets, or platforms processing personal data.
• Collaborate with the global data privacy organization.
• Facilitate operational risk assessments, threat modeling, and vulnerability assessments to identify data protection-related risks.
• Work with stakeholders to maintain a risk register and treatment plans.
• Provide guidance on risk management best practices, focusing on personal data processing, including implementing new processes and controls.

REQUIREMENTS OF THE POSITION

• Bachelor’s degree in computer science, IT, or related field.
• 5-7 years of experience.
• Experience developing, implementing, and maintaining an ISMS based on ISO 27001 or similar standards.
• Profound cybersecurity risk management experience.
• Strong understanding of risk management principles, especially risk aggregation and evaluation at the enterprise level.
• Experience with risk assessments, threat modeling, and vulnerability assessments.
• Knowledge of relevant cybersecurity laws and regulations.
• Above-average knowledge of data protection laws; passion for data protection; professional expertise is a plus.
• Interest in working in an international regulatory environment.
• Excellent communication and interpersonal skills for effective interdisciplinary collaboration.
• Relevant certifications such as CISSP, CISM, CRISC are advantageous.
• Proficiency in English, both spoken and written.

WHAT WE OFFER

• A secure work environment prioritizing health, safety, and wellbeing.
• Flexible work schedule and home-office options.
• Learning and development opportunities.
• 23 holiday days per year plus 5 additional days (readjustment).
• A collaborative, innovative, and trustful work environment.
• Opportunity to work in an international team and on global projects.
• Relocation assistance to Madrid.

HOW TO REACH US

If you're interested or know someone who might be, please contact us at [e-mail].

At BASF, we offer more than just compensation. Our total package includes a broad range of elements to support you at every life stage. Learn more at you@BASF.