Cyber Governance, Risk & Assurance Analyst (German language)

Fresenius Group; Wrocław; Híbrido; PLN 180.000 - 280.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private medical health care

Multisport card

Life insurance

Social fund

Fruits in the office

Integration events

Employee pension program

Descripción de la vacante

Fresenius Digital Technology, part of the Fresenius Group, is seeking a Cyber Governance, Risk & Assurance Analyst to operationalize governance, risk and assurance across the organization. You will assess cybersecurity controls, build risk treatment plans and maintain the risk register for transparent reporting to stakeholders.

Based in Wrocław or remote with weekly office visits, you will collaborate with GRC teams, leverage OneTrust and PowerBI, and contribute to a secure, compliant healthcare

Formación

• Experience in cybersecurity governance, risk management, and/or compliance.
• Understanding of cybersecurity frameworks, regulations, and industry best practices.
• Experience analyzing cybersecurity controls, risks and vulnerabilities.
• Familiarity with third-party risk management processes and methodologies.
• Strong analytical, communication, and interpersonal skills.
• Business-fluent proficiency in German and English, written and spoken.

Responsabilidades

• Oversee the evolving cyber threat landscape to identify emerging risks.
• Conduct thorough cyber risk assessments, both internally and for third-parties.
• Develop effective risk treatment plans and monitor their implementation.
• Maintain a centralized risk register for reporting and management.
• Document and analyze maturity of cybersecurity controls.
• Maintain and improve the controls effectiveness metrics framework.
• Administer GRC and Vendor Risk Management tools.
• Provide consultation on cyber risks and mitigation strategies to internal stakeholders.

Conocimientos

Analytical skills

Communication skills

Interpersonal skills

German and English (business fluency)

Educación

Bachelor's degree in Computer Science/IT/Cybersecurity or related field

Herramientas

OneTrust GRC

PowerBI

Descripción del empleo

As Fresenius Digital Technology, we are an integral part of the Fresenius Group, responsible for the IT of the healthcare company and its business areas. We ensure a frictionless interface of IT and business operations so that all employees in production, logistics, and other areas can work efficiently and without interference.

Our Group Cybersecurity Office (GCSO) is responsible for monitoring and coordinating the group wide efforts on Cybersecurity. The main focus is to reduce the risk and likelihood of intrusions and data breaches and therefore enhancing the overall confidentiality, availability and integrity of data for patients, customers and employees.

As a Cyber Governance, Risk & Assurance Analyst within our Group Cybersecurity Office, you will play a pivotal role in operationalizing the Governance, Risk & Assurance processes for the Fresenius Group.

Your daily duties will include:

• Oversight the evolving cyber threat landscape to identify emerging risks
• Conduct thorough cyber risk assessments, both internally and for third-parties
• Development of effective risk treatment plans and monitor their implementation
• Maintenance of a centralized risk register for accurate reporting and management
• Documentation and analysis of the maturity levels of the organization's cybersecurity controls
• Maintenance and improvement of the cybersecurity controls effectiveness metrics framework
• Administration of the Governance, Risk & Assurance solution tools (GRC, Vendor Risk Management, etc.)
• Provision of consultation on cyber risks and mitigation strategies to internal stakeholders

Ideally, if you have:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
• At least 5 years of experience in cybersecurity governance, risk management, and/or compliance
• Understanding of cybersecurity frameworks, regulations, and industry best practices
• Experience in analyzing cybersecurity controls, risks and vulnerabilities
• Familiarity with third-party risk management processes and methodologies
• Strong analytical, communication, and interpersonal skills
• Business-fluent proficiency in German and English, written and spoken
• Relevant certifications such as CISSP, CISM, CRISC, or CISA are a plus
• Ability to work effectively both independently and collaboratively in a dynamic environment

Nice to have:

• Experience with the OneTrust GRC system
• Proficiency in PowerBI

We value diverse skills and experiences.

What is our offer to you:

• Great collaboration and knowledge sharing spirit
• Stable employment in a company with international environment
• Competitive salary (based on your experience)
• Benefit package (private medical health care, multisport card, life insurance, social fund, fruits in the office, integration events, employee pension program)
• Work in a modern office located in Wrocław city centre (pl. Nowy Targ) or from your home (we meet at the office once a week)
• Excellent teamwork culture and friendly atmosphere