Cyber Security Risk Senior Consultant (D/F/M)

- The work task requires knowledge and skills generally acquired through a relevant, completed degree program in the field of engineering, computer science, cybersecurity, or comparable degree programs, along with a related extended subject-specific additional qualification. Overall required knowledge and experience may have been obtained through other means. - Extensive knowledge and experience in the listed tasks. - Deep understanding of major security and risk management frameworks (ISO 27001, ISO 27005, ISO 31000, NIST CSF, EBIOS RM, FAIR), as well as security technologies, controls, and best practices. - Ability to develop and maintain security policies, procedures, and standards. - Strong project management skills with experience in managing multiple concurrent projects. - Proven extensive experience leading risk assessment projects and security initiatives, with strong experience in risk assessment methodologies and qualitative risk analysis. Knowledge of quantitative risk analysis and calculation methods is a plus. - Extensive knowledge of regulatory requirements across industries (Export Control, GDPR, NIS2, Defense, EASA Regulations) and experience with GRC platforms and risk management tools. - Exceptional ability to communicate complex security concepts to non-technical stakeholders, along with strong presentation and report writing skills for executive-level audiences. Strong negotiation, influencing skills, and stakeholder management at the executive level are essential. - Ability to advise customers on their requests and objectives, building consensus among diverse stakeholders. - Cultural sensitivity for working with international teams. - German and English negotiation level required (speaking and writing). - Willingness to travel domestically and abroad.