Risk & Security Coordinator

For a business-critical application portfolio in a complex enterprise environment, we are looking for an experienced individual as a Senior IT Risk & Governance Manager.

In this role, you take on a central function at the interface of IT Operations, DevOps, Security, Compliance and Governance. You manage risks across various teams and organisational units, create transparency for management and support the Product Owner in the further development of security and governance topics.

In doing so, you have the opportunity to sustainably develop existing risk and governance processes and implement concrete improvements in a demanding IT environment.

• Consolidation, structuring and management of the IT risk portfolio

• Conducting and moderating risk analyses and risk reviews

• Identification, assessment and tracking of technical and organisational risks

• Coordination and management of risk mitigation measures

• Management of security, compliance and governance topics

• Preparation of management reports, decision-making bases and meaningful status overviews

• Active stakeholder management across operations, security, delivery and product teams

• Support of the Product Owner on governance, risk and security issues

• Further development and optimisation of existing risk and governance processes

• Ensuring structured and transparent communication of complex technical and organisational matters

You have several years of practical experience in a demanding IT operations, service management, DevOps, risk or security governance environment and bring a strong understanding of IT risks and information security.

Must-have

• Several years of experience in IT operations, service management or DevOps

• Solid experience in IT risk management

• Experience in analysing and assessing technical as well as organisational risks

• Good knowledge of information security, security governance and compliance

• Experience in moderating risk reviews

• Experience in coordinating and tracking risk mitigation measures

• Extensive experience in stakeholder management across multiple teams and organisational units

• Ability to prepare complex technical and organisational topics clearly, structured and management-appropriately

• Experience in reporting for management and decision-making bodies

• Experience with Jira and Confluence

• Very good German skills as well as good English skills

Nice-to-have

• Knowledge of ISO 27001, NIST, COBIT or comparable frameworks

• Experience with audit, compliance and regulatory requirements

• Experience in operating business-critical applications in cloud environments

• Understanding of DevOps, SRE and modern operating models

• Experience in governance of application portfolios

• Certifications such as CISSP, CISM, CRISC, ITIL or comparable

• Experience in large enterprise organisations with complex stakeholder structures

• Bachelor's, HF, FH or university degree in computer science, business informatics, information security or a comparable technical discipline

Alternatively: A comparable qualification through several years of relevant professional experience in IT operations, service management, DevOps, risk management or security governance.

Certifications such as ISMS, ISO 27001, ITIL, COBIT, CISSP, CISM or CRISC are advantageous.

• A demanding senior mandate in a complex enterprise environment

• High personal responsibility and direct influence on risk, security and governance

• Close collaboration with product owners, DevOps and security experts

• Work on a business-critical application portfolio

• The opportunity to sustainably further develop risk, compliance and security governance

• Hybrid working model after onboarding with 2 days home office