Cybersecurity Risk Management Consultant

Project overview

We are looking for a Cybersecurity Risk and Compliance Consultant to strengthen risk management and integrate cybersecurity and compliance into projects, business decisions, and technology initiatives – including those with AI and new technologies.

Further Framework Data

Type of Assignment:

Utilization: 100%

Industry: Industry

Responsibilities

Must-Have Requirements

Nice-to-Have Requirements

-

Additional Information

100% Remote

Let’s power the future together

From business case to implementation: As a leading consulting firm for strategic transformations, we are a trusted partner for our clients – and for our employees. Responsible, high-performing, and always with a focus on people. #WeAreWavestone

With our 360° portfolio of consulting services, we combine first-class industry expertise with a broad spectrum of cross-industry competencies, work interdisciplinarily, and think outside the box. We can thus offer our partner companies and freelancers comprehensive perspectives within our own projects and support them as a long-term framework agreement partner in filling project vacancies – promptly and directly.

We look forward to hearing from you!

Your direct contact at Wavestone

Mirza Tahirovic

Phone: *

Email: *@*.eu

• Identify and assess cybersecurity risks, evaluate their business impact, and create prioritized risk assessments and registers
• Define risk treatment plans, security controls, remediation action plans, and control assignments
• Integrate security requirements into projects, architecture reviews, procurement activities, and third-party relationships
• Assess risks related to AI and new technologies and their impact on compliance
• Align cybersecurity risk and compliance activities with relevant NIST and ISO frameworks, GDPR, the EU AI Act, and applicable export control requirements
• Develop governance materials, management dashboards, awareness content, and decision-oriented recommendations
• Moderate workshops and align results with stakeholders from security, architecture, project management, legal, procurement, engineering, and business.
• At least 10 years of professional experience and availability for full-time engagement
• Expertise in cybersecurity risk assessment, governance, and control frameworks, including alignment with NIST, ISO 2700x, ISO 42001, GDPR, the EU AI Act, and relevant export control regulations
• Knowledge in AI security, new technologies, and evolving cyber threats, including associated cybersecurity and compliance risks
• Experience in assessing and managing security risks in projects, as well as collaborating with third parties and suppliers
• Knowledge of security architecture and cybersecurity compliance
• Strong analytical skills and the ability to assess business impact
• Excellent skills in executive communication and stakeholder management, including moderating workshops and influencing technical and non-technical stakeholders
• Pragmatism, adaptability, sense of responsibility, and ability to manage multiple parallel initiatives

Project details

• Start: flexible
• Location: DE
• Languages: German