IT Risk Manager

Project overview

We are looking for an experienced IT Risk Manager to further develop and standardize global IT risk management processes. In this role, you will be centrally responsible for shaping a robust risk landscape.

Your tasks include setting up, maintaining, and analyzing a central IT Risk Register, as well as developing and tracking measures for treating identified IT risks. You will create management reports, KPIs, KRIs, and Risk Heatmaps using modern visualization tools and integrate IT risk management into Corporate Risk Management and ISMS. Furthermore, you will support audits and implement regulatory requirements such as NIS2, ISO 27001, and TISAX. Coordination with international stakeholders and local responsible parties for sustainable risk management is also part of your responsibility.

You have a degree in Computer Science, Business Informatics, IT Security, or a comparable qualification. Professional experience in IT Risk Management, IT Security, or IT Governance, ideally in an international environment, is required. Knowledge of NIS2, ISO 27001, and TISAX, as well as practical experience in their implementation, is essential. Familiarity with risk frameworks such as ISO 31000, ISO 27005, or NIST is assumed. Experience with GRC and reporting tools such as ServiceNow GRC, RSA Archer, Power BI, or Tableau is necessary.

You have knowledge in setting up and operating an ISMS as well as in qualitative and quantitative risk analyses. Very good German and English skills for international communication, reports, and presentations are required.

The workplace is on-site in Aschaffenburg, Bavaria.

Project details

• Start: flexible
• Remote: remote
• Location: Aschaffenburg, DE
• Languages: German