Operative Compliance & Security IT Project Manager

Responsibilities

• Development and further development of an Application Governance & Security Framework
• Optimization and establishment of uniform risk management processes
• Further development and testing of a uniform methodology for risk assessment: Development of a scoring model and an associated governance process for assessing application risks, including piloting with selected applications and subsequent optimization
• Group-wide introduction of the risk management methodology: Rollout of the coordinated methodology across the entire relevant application landscape, including tool support, e.g., with Alyne, to ensure uniform assessment
• Setup of monitoring and reporting structures: Introduction of dashboards and reporting processes for transparent presentation of the risk situation and compliance status for management, customers, and regulatory requirements
• Support in the further development of security and maturity processes (SWRP): Derivation and implementation of concrete measures from assessment results for sustainable improvement of the security maturity level along defined minimum requirements
• Execution of individual risk analyses for applications and systems: Processing of specific individual cases, including assessment, documentation, and derivation of suitable measures
• Support with adjacent compliance evidence: Consolidation and preparation of relevant risk information for various proof and documentation purposes

Requirements

These requirements are a must-have. Please detail proven experience in each of these areas in your motivation description for this project.

• Proven experience and expertise in the above-mentioned task areas through projects at comparable, globally positioned companies
• Strong project management skills with a structured and goal-oriented approach
• Experience in Application Governance, Risk, Compliance, and IT Security
• Experience in developing and implementing standardized risk assessment methods for applications
• Experience with scoring models, governance processes, and auditable security/compliance processes
• Experience in conducting individual application and system risk assessments
• Experience with reporting, dashboards, and regulatory or customer-related proof formats
• Ideally, experience with GRC/Risk tools, e.g., Alyne
• Advanced understanding of compliance, asset and license management, IT security, data protection, as well as business and IT processes
• High degree of independence and the ability to develop and implement central components partly from scratch
• Strong analytical skills and a quick grasp of complex subjects
• Strong implementation skills and a proactive 'can-do' mentality, combined with the ability to communicate complex topics understandably to stakeholders
• Fluent English and German, both written and spoken

Nice to have

If you are available and meet the requirements, please click "Interest".

If you are not available, please enter your earliest availability date in the calendar.

For questions, feel free to contact your Freelancer Team via [contact removed].

Thank you and best regards,

Your Freelancer Team

Iskander Business Partner

• Confident handling of the evaluation of large amounts of data (Excel, Power BI)
• High conflict resolution and communication skills
• Experience with KRITIS and NIS2 directives
• Experience with Security Policy Frameworks and maturity models

Project details

Munich

01.10.2026

15 months with option for extension

Utilization: 100%

Remote Share: approx. 95%

On-site Share: Short onboarding on-site, then 1-3 days per quarter on-site

Background of the task:

Our client, an internationally active manufacturing company, is looking for an experienced consultant in the area of operational compliance and security for applications. As part of this project, a risk-oriented approach is to be established, with which security and compliance requirements can be systematically assessed, monitored, and controlled across the entire application landscape.

The goal is to create clear transparency regarding existing risks for each application, ensure defined security minimum standards, and firmly anchor security governance in the Application Lifecycle. The focus is on a sustainable, traceable, and auditable process – not just a one-time assessment.

• Start: 2026-10-01
• Location: München, DE
• Languages: German