Senior Consultant IT Security - Technical Risk and Vulnerability Management

Project overview

Description:

Role: Senior Consultant IT Security - Technical Risk and Vulnerability Management

Responsibilities

• Analysis and further development of company-wide management of technical security risks and potential attack surfaces within an internationally networked IT organization.
• Identification, investigation, and assessment of security-relevant vulnerabilities and possible attack scenarios in complex IT infrastructures.
• Development of risk-oriented recommendations for action, taking into account technical impacts, business relevance, current threat scenarios, and operational framework conditions.
• Coordination and technical support of measures to reduce existing security risks within various IT systems, platforms, and organizational units.
• Coordination of technical security requirements with international IT operations units, external service providers, and responsible specialist departments.
• Support in harmonizing security standards and risk assessment procedures within historically grown and modern IT architectures.
• Investigation of current cyber threats, innovative attack patterns, and automated attack technologies, including AI-based methods.
• Conception of suitable measures to improve the resilience of network, infrastructure, cloud, and platform environments.
• Technical consulting for technical teams in classifying security risks, evaluating different solution approaches, and defining appropriate measures.
• Support for technical change and modernization projects, considering information security, operational stability, and economic feasibility.

Requirements

• Sound professional experience in technical information security, ideally with a focus on vulnerability management, cyber risk management, attack surface management, or infrastructural IT security.
• Comprehensive knowledge of common cyber attack methods, technical vulnerabilities, and security-relevant interrelationships within complex enterprise architectures.
• Experience in analyzing and assessing technical attack surfaces and in deriving suitable measures for sustainable risk minimization.
• Confident understanding of network architectures, cloud infrastructures, server landscapes, platform services, and security-critical IT components.
• Practical experience with heterogeneous IT environments, different technology generations, and complex operational or service provider structures.
• Ability to comprehensibly present technical security risks, evaluate measures for their effectiveness, and provide technical support for their implementation.
• Experience in collaborating with interdisciplinary and internationally positioned IT and security organizations.

Project details

Period: 19.10.2026 - 30.06.2027

Utilization: 100 %

• Start: 2026-10-19
• Location: DE
• Languages: German