Principal Specialist, Cyber security & Risk Management (m/f/d)

As an Information System Security Officer, you will lead cyber governance and regulatory compliance across RTX sites in Germany, with Heidelberg as the primary location. You will drive security posture, audits, and risk management to protect critical assets, applications, and data. You’ll collaborate with cross-functional teams to align DT and RTX cybersecurity services with business needs, fostering a culture of cybersecurity. This hybrid role blends strategic leadership with hands-on governance across multiple sites, programs, and regulators. You will help shape secure digital transformation and incident readiness across the organization.

• Flexible working times
• 30 days of vacation
• Industry-specific pay
• Company sponsored pension plan
• Corporate health management
• Internal and external training opportunities

• Governance: manage local cyber governance, ISMS, and regulatory adherence across sites.
• Audit and compliance: drive internal/external audits, certifications, and compliance readiness.
• Cyber risk management: identify, evaluate, and treat cyber risks; lead risk assessments and remediation.
• Security controls: oversee implementation of controls for applications, infrastructure, Cloud, and OT.
• Policy and awareness: develop security policies and run an annual security awareness plan.
• Incident management: monitor threats, respond to incidents, and support incident response readiness.
• Operations support: provide guidance on vulnerability management, DR/BC, and cyber programs.
• Technical leadership: advise engineering/operations on security requirements; liaison with regulators and customers.
• Stakeholder collaboration: coordinate with DT Int’l Operations, RTX Global GRC, and site stakeholders.

• Master’s degree in Computer Science, Information Security, Engineering, or related field
• 8+ years of cybersecurity experience
• Experience leading multi-site/global compliance programs
• Strong knowledge of risk management, security architecture/engineering, asset security, network security, IAM, security operations
• Proficiency with ISO 27001, ISO 27005, NIST CSF and SP 800-171/82
• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, OSCP/CEH/GIAC
• Excellent communication and stakeholder management at C-level
• Eligibility for national security clearance (where applicable)

• ownership and accountability
• curiosity and passion
• ability to work under pressure
• Risk Management
• Security Architecture & Engineering
• Asset Security