Security Risk Manager at Boehringer Ingelheim

Apply for Security Risk Manager at Boehringer Ingelheim in Straße, RP, DE. This full‑time on‑site position offers great opportunities for career growth.

The position: We are looking for a Security Risk Manager based in Ingelheim to deliver the implementation of Enterprise Security Risk Management programmes including EU resilience legislation (NIS2 and CER) and strengthen our organization’s ability to manage disruption, protect critical services, and meet evolving regulatory expectations. This position has a hybrid setup of approximately 3 days per week on site.

Responsibilities

In this role, you will support the delivery of enterprise security risk management (ESRM) across the organization, embedding a consistent, risk‑based approach to identifying, assessing, and managing security risks to critical operations. By translating regulatory requirements, you will turn frameworks such as NIS2, CER, and related standards into practical controls, governance structures, and ways of working that integrate into day‑to‑day operations. Within your area of responsibility, you will assess risks across cyber, physical, operational, and third‑party domains, ensuring a joined‑up, enterprise‑wide view of risks impacting critical services. As part of the team, you will contribute to the design and implementation of security and resilience frameworks, including policies, standards, controls, and assurance processes that are practical and scalable. With a focus on transparency, you will provide clear, actionable insight to senior stakeholders on risk exposure, compliance posture, and prioritized mitigation actions. Working cross‑functionally, you will embed security risk management into business operations, strengthening overall resilience and enabling risk‑informed decision‑making.

Requirements

• Relevant qualifications in Security Management, Information Security, Risk Management, or equivalent hands‑on experience.
• Additional qualifications in project management, auditing or related disciplines would be an advantage.
• Proven experience delivering enterprise security risk management across physical, cyber, and operational domains in complex or regulated environments including exposure to third‑party / supply chain risk management and critical service dependencies.
• Strong practical experience in risk assessment, control design, and implementation, with the ability to embed these into day‑to‑day operations and capability in data, analytics, and dashboarding to support risk‑based decision‑making.
• Experience translating regulatory and framework requirements (e.g. NIS2, CER, ISO, or similar) into actionable controls and governance.
• Track record of delivering cross‑functional risk or security initiatives, including audit support and assurance activities.
• Strong stakeholder management skills, with the ability to influence, challenge, and communicate risk clearly at all organizational levels.
• Experience driving change, transformation, or programme delivery in global organizations.

Benefits

We also offer a comprehensive benefits and wellbeing package. Salary information will be shared during the recruitment process.

EEO Statement

Applications from persons with severe disabilities are warmly welcomed. In cases of equal qualifications, such applicants will be given preferential consideration in the selection process.

Contact: Tel: +49 (0) | Email: