Consultant Cybersecurity Governance

Job Description

You really want to shape big things? Here you are – be part of ContiTechs central Cybersecurity team where you have the chance to further develop our ISMS incl. reporting landscape. In this role you

Define, maintain, and continuously improve rules, procedures, and processes in the ISMS considering internal and external requirements.
Take over Lifecycle Management of Cybersecurity Rule Landscape
Manage and evolve the regulatory landscape as an efficient and effective regulatory system for cybersecurity
Implement and execute rule adherence measurement processes
Execute Cybersecurity Assessments
Exercise policy authority on the topic of cybersecurity
Assess and process security exceptions
Work with various data sources to identify cyber risks within the organization
Conduct cyber risk assessments and prioritize risks based on their potential impact on the organization
Actively track cyber risks, including evaluation of mitigation effectiveness
Create relevant reportings to support business decisions
Shape and influence ContiTechs Information Security culture

If you believe Information Security is rather a process and terms like ISMS, Risk Appetite and 2nd line of defense do have a meaning for you, we look forward to your application.

Qualifications

Academic degree in a relevant field, equivalent Information Security certifications (e.g., CISM) are desired
Several years experience in the field of Information Security
Comprehensive knowledge of IT infrastructure, cybersecurity, and industry standards (e.g., ISO27001, NIST, NIS2)
Knowledge in PowerBi
Fluency in English (written and spoken)
Experience in IT, process management, and Cybersecurity Governance
Strong analytical skills and experience in defining cybersecurity governance, including measurable KPIs
Interpersonal and intercultural skills to work with different stakeholders