Information Security Risk Manager (f/m/d)

- Assess the current information security landscape by reviewing existing policies, processes, tools, and systems, and by conducting risk and gap analyses aligned with organizational priorities and operational realities. - Define and implement an information security risk management strategy by developing roadmaps and allocating resources in line with IT risk assessments, to address vulnerabilities and strengthen organizational resilience. - Establish and oversee an information security policy framework in compliance with GDPR, local regulations, and international MSF standards, to safeguard data, manage third-party risks, and ensure regulatory alignment. - Create and manage standardized risk monitoring mechanisms by developing reporting tools and dashboards, to track risk metrics, strengthen collaboration, and enable proactive risk mitigation. - Develop and validate an incident response plan by defining procedures and by supporting testing activities such as tabletop exercises or simulations. - Conduct and coordinate training and awareness initiatives for staff and IT teams in line with security policies and best practices, to build organizational knowledge, preparedness, and accountability. - Provide expert guidance to management and stakeholders on security measures and policy improvements, to enable informed decision-making and support organizational compliance.