Lead GRC Cyber Security Consultant (D/F/M)

The tasks for this position require a relevant completed degree in engineering, computer science, cybersecurity, or related fields, typically achieved over a standard study period of up to 4 years. Additional extended subject-specific qualifications or completed vocational training with significant relevant qualifications may also be accepted. Knowledge and experience can be accumulated through various means. Expertise required includes: - Extensive knowledge and experience in the specified tasks. - Deep understanding of major security management frameworks (ISO 2700x, NIST CSF, OT Governance, ISO 31000, EBIOS-RM, BSI IT-Grundschutz). - Strong understanding of security technologies, controls, and best practices. - Ability to create and uphold security policies, procedures, and standards. - Proven experience leading Governance projects and security initiatives, along with strong experience in ISMS implementation and security requirements. - Knowledge of regulatory requirements across industries (BSI, Export Control, GDPR, NIS2, Defense, EASA Regulations) and experience with GRC platforms and risk management tools. - Exceptional communication skills for conveying complex security concepts to non-technical stakeholders, along with strong presentation skills for executive audiences and stakeholder management. - Ability to advise customers on requests and build consensus among diverse stakeholders. - Cultural sensitivity for working with international teams. - Proficiency in German and English at a negotiation level (oral and written). - Willingness to travel for business both domestically and internationally. A security clearance is required for this activity or must be obtained from the responsible authorities.