Cyber Security GRC Consultant (D/F/M)

We are looking for candidates who possess knowledge and skills typically acquired through a relevant, completed degree program lasting up to 4 years in engineering, computer science, cybersecurity, or comparable fields, complemented by subject-specific additional qualifications. Experience can also be gained through various other means. You should have fundamental knowledge and experience in the tasks outlined. A deep understanding of major security management frameworks such as ISO 27001, NIST CSF, OT Governance, ISO 27005, ISO 31000, and any risk methodology is necessary. Additionally, you must demonstrate an understanding of security technologies, controls, and best practices, alongside the ability to develop and maintain security policies, procedures, and standards. Proven experience leading governance projects and security initiatives is advantageous, especially related to ISMS implementation and security requirements at all levels. Familiarity with regulatory requirements across industries (Export Control, GDPR, NIS2, Defense, EASA Regulations) and experience with GRC platforms and risk management tools will be beneficial. Exceptional communication skills for conveying complex security concepts to non-technical stakeholders are essential. A security clearance is required for this role, or it must be issued by the responsible authorities. You should possess the ability to advise customers regarding their needs and objectives and build consensus among diverse stakeholders. Cultural sensitivity while working with international teams is important. Proficiency in German and English at a negotiation level is mandatory (both speaking and writing), and a willingness to travel domestically and abroad is required.