Cyber Governance, Risk & Assurance Analyst (with English/German)

Fresenius Digital Technology Polska sp. z o.o.; Wrocław; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Private medical health care

Multisport card

Life insurance

Social fund

Fruits in the office

Integration events

Employee pension program

Job summary

Fresenius Digital Technology Polska sp. z o.o. poszukuje specjalisty ds. Cyber Governance, Risk & Assurance w ramach Group Cybersecurity Office. Twoje zadania obejmą ocenę ryzyk cybernetycznych, monitorowanie kontrolek i wsparcie interesariuszy.

Praca w dynamicznym, międzynarodowym środowisku z opcją pracy zdalnej/hybrydowej w biurze we Wrocławiu, z elastycznym podejściem do współpracy i rozwojem kompetencji.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• At least 5 years of experience in cybersecurity governance, risk management or compliance.
• Understanding of cybersecurity frameworks and regulations.
• Experience analyzing controls, risks and vulnerabilities.
• Familiarity with third-party risk management processes.
• Strong analytical and communication skills.
• Business-fluent English or German (written and spoken).
• Certifications such as CISSP, CISM, CRISC or CISA are a plus.
• Ability to work independently and collaboratively in a dynamic environment.

Responsibilities

• Oversight the evolving cyber threat landscape to identify emerging risks.
• Conduct thorough cyber risk assessments, both internally and for third-parties.
• Development of effective risk treatment plans and monitor their implementation.
• Maintenance of a centralized risk register for accurate reporting and management.
• Documentation and analysis of the maturity levels of the organization's cybersecurity controls.
• Maintenance and improvement of the cybersecurity controls effectiveness metrics framework.
• Administration of the Governance, Risk & Assurance solution tools (GRC, Vendor Risk Management, etc.).
• Provision of consultation on cyber risks and mitigation strategies to internal stakeholders.

Skills

Cyber governance & compliance

Cybersecurity frameworks & regulations

Cyber risk analysis

Third-party risk management

Analytical & communication skills

English proficiency

German proficiency

Certifications (CISSP/CISM/CRISC/CISA)

Independent & collaborative work

Education

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

Tools

OneTrust GRC

PowerBI

Job description

Nasze wymagania:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
• At least 5 years of experience in cybersecurity governance, risk management, and/or compliance
• Understanding of cybersecurity frameworks, regulations, and industry best practices
• Experience in analyzing cybersecurity controls, risks and vulnerabilities
• Familiarity with third-party risk management processes and methodologies
• Strong analytical, communication, and interpersonal skills
• Business-fluent proficiency in English or German and English, written and spoken
• Relevant certifications such as CISSP, CISM, CRISC, or CISA are a plus
• Ability to work effectively both independently and collaboratively in a dynamic environment

Mile widziane:

• Experience with the OneTrust GRC system
• Proficiency in PowerBI

O projekcie:

Our Group Cybersecurity Office (GCSO) is responsible for monitoring and coordinating the group wide efforts on Cybersecurity. The main focus is to reduce the risk and likelihood of intrusions and data breaches and therefore enhancing the overall confidentiality, availability and integrity of data for patients, customers and employees. As a Cyber Governance, Risk & Assurance Analyst within our Group Cybersecurity Office, you will play a pivotal role in operationalizing the Governance, Risk & Assurance processes for the Fresenius Group.

Zakres obowiązków:

• Oversight the evolving cyber threat landscape to identify emerging risks
• Conduct thorough cyber risk assessments, both internally and for third-parties
• Development of effective risk treatment plans and monitor their implementation
• Maintenance of a centralized risk register for accurate reporting and management
• Documentation and analysis of the maturity levels of the organization's cybersecurity controls
• Maintenance and improvement of the cybersecurity controls effectiveness metrics framework
• Administration of the Governance, Risk & Assurance solution tools (GRC, Vendor Risk Management, etc.)
• Provision of consultation on cyber risks and mitigation strategies to internal stakeholders

Oferujemy:

• Great collaboration and knowledge sharing spirit
• Stable employment in a company with international environment
• Competitive salary (based on your experience)
• Benefit package (private medical health care, multisport card, life insurance, social fund, fruits in the office, integration events, employee pension program)
• Work in a modern office located in Wrocław city centre (pl. Nowy Targ) or from your home (we meet at the office once a week)
• Excellent teamwork culture and friendly atmosphere