Security Risk Manager

The Position

We are looking for a Security Risk Manager based in Ingelheim to deliver the implementation of Enterprise Security Risk Management programmes including EU resilience legislation (NIS2 and CER) and strengthen our organization's ability to manage disruption, protect critical services, and meet evolving regulatory expectations.

This position has a hybrid setup of approximately 3 days per week on site.

Tasks & Responsibilities

• Support the delivery of enterprise security risk management (ESRM) across the organization, embedding a consistent, risk‑based approach to identifying, assessing, and managing security risks to critical operations.
• Translate regulatory requirements, turning frameworks such as NIS2, CER, and related standards into practical controls, governance structures, and ways of working that integrate into day‑to‑day operations.
• Assess risks across cyber, physical, operational, and third‑party domains, ensuring a joined‑up, enterprise‑wide view of risks impacting critical services.
• Contribute to the design and implementation of security and resilience frameworks, including policies, standards, controls, and assurance processes that are practical and scalable.
• Provide clear, actionable insight to senior stakeholders on risk exposure, compliance posture, and prioritized mitigation actions.
• Embed security risk management into business operations, strengthening overall resilience and enabling risk‑informed decision‑making.

Requirements

• Relevant qualifications in Security Management, Information Security, Risk Management, or equivalent hands‑on experience. Additional qualifications in project management, auditing or related disciplines would be an advantage.
• Proven experience delivering enterprise security risk management across physical, cyber, and operational domains in complex or regulated environments including exposure to third‑party / supply chain risk management and critical service dependencies.
• Strong practical experience in risk assessment, control design, and implementation, with the ability to embed these into day‑to‑day operations and capability in data, analytics, and dashboarding to support risk‑based decision‑making.
• Experience translating regulatory and framework requirements (e.g. NIS2, CER, ISO, or similar) into actionable controls and governance.
• Track record of delivering cross‑functional risk or security initiatives, including audit support and assurance activities.
• Strong stakeholder management skills, with the ability to influence, challenge, and communicate risk clearly at all organizational levels.
• Experience driving change, transformation, or programme delivery in global organisations.

Benefits

We offer a comprehensive benefits and wellbeing package. Salary information will be shared during the recruitment process.

Equal Opportunity

Applications from persons with severe disabilities are warmly welcomed. In cases of equal qualifications, such applicants will be given preferential consideration in the selection process.