Cyber Governance, Risk & Assurance Analyst (with German)

Fresenius Group; Wrocław; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private medical health care

Multisport card

Life insurance

Social fund

Fruits in the office

Integration events

Employee pension program

Job summary

Fresenius Digital Technology in Wroclaw is seeking a Cyber Governance, Risk & Assurance Analyst to operationalize governance, risk, and assurance for the Fresenius Group. You will oversee cyber risk, assess controls, and coordinate remediation across stakeholders.

The role requires 5+ years in cybersecurity governance, risk management, and compliance, with fluency in German and English. Remote/hybrid work options and a comprehensive benefits package are offered.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• At least 5 years of experience in cybersecurity governance, risk management, and/or compliance.
• Understanding of cybersecurity frameworks, regulations, and industry best practices.
• Experience in analyzing cybersecurity controls, risks and vulnerabilities.
• Familiarity with third-party risk management processes and methodologies.
• Strong analytical, communication, and interpersonal skills.
• Business-fluent proficiency in both German and English.
• Relevant certifications such as CISSP, CISM, CRISC, or CISA are a plus.
• Ability to work effectively both independently and collaboratively in a dynamic environment.
• Nice to have: Experience with the OneTrust GRC system; Proficiency in PowerBI.

Responsibilities

• Oversee the evolving cyber threat landscape to identify emerging risks.
• Conduct thorough cyber risk assessments, both internally and for third-parties.
• Develop effective risk treatment plans and monitor their implementation.
• Maintain a centralized risk register for accurate reporting and management.
• Document and analyze the maturity levels of the organization's cybersecurity controls.
• Maintain and improve the cybersecurity controls effectiveness metrics framework.
• Administer the Governance, Risk & Assurance solution tools (GRC, Vendor Risk Management, etc.).
• Provide consultation on cyber risks and mitigation strategies to internal stakeholders.

Skills

Cybersecurity governance

Risk management

Compliance

Regulatory understanding

Education

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Tools

OneTrust GRC

PowerBI

Vendor Risk Management tools

Job description

As Fresenius Digital Technology, we are an integral part of the Fresenius Group, responsible for the IT of the healthcare company and its business areas. We ensure a frictionless interface of IT and business operations so that all employees in production, logistics, and other areas can work efficiently and without interference.

Our Group Cybersecurity Office (GCSO) is responsible for monitoring and coordinating the group wide efforts on Cybersecurity. The main focus is to reduce the risk and likelihood of intrusions and data breaches and therefore enhancing the overall confidentiality, availability and integrity of data for patients, customers and employees.

As a Cyber Governance, Risk & Assurance Analyst within our Group Cybersecurity Office, you will play a pivotal role in operationalizing the Governance, Risk & Assurance processes for the Fresenius Group.

Your daily duties will include:

• Oversight the evolving cyber threat landscape to identify emerging risks
• Conduct thorough cyber risk assessments, both internally and for third-parties
• Development of effective risk treatment plans and monitor their implementation
• Maintenance of a centralized risk register for accurate reporting and management
• Documentation and analysis of the maturity levels of the organization's cybersecurity controls
• Maintenance and improvement of the cybersecurity controls effectiveness metrics framework
• Administration of the Governance, Risk & Assurance solution tools (GRC, Vendor Risk Management, etc.)
• Provision of consultation on cyber risks and mitigation strategies to internal stakeholders

Ideally, if you have:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field
• At least 5 years of experience in cybersecurity governance, risk management, and/or compliance
• Understanding of cybersecurity frameworks, regulations, and industry best practices
• Experience in analyzing cybersecurity controls, risks and vulnerabilities
• Familiarity with third-party risk management processes and methodologies
• Strong analytical, communication, and interpersonal skills
• Business-fluent proficiency in both German and English, written and spoken
• Relevant certifications such as CISSP, CISM, CRISC, or CISA are a plus
• Ability to work effectively both independently and collaboratively in a dynamic environment

Nice to have:

• Experience with the OneTrust GRC system
• Proficiency in PowerBI

What is our offer to you:

• Great collaboration and knowledge sharing spirit
• Stable employment in a company with international environment
• Competitive salary (based on your experience)
• Benefit package (private medical health care, multisport card, life insurance, social fund, fruits in the office, integration events, employee pension program)
• Work in a modern office located in Wrocław city centre (pl. Nowy Targ) or from your home (we meet at the office once a week)
• Excellent teamwork culture and friendly atmosphere