CYBER SECURITY GRC SENIOR CONSULTANT (D/F/M)

Stellenbeschreibung:

CYBER SECURITY GRC SENIOR CONSULTANT (D/F/M)

Job Description
Airbus Protect brings together experts in the fields of cybersecurity, safety and sustainability. We deliver expertise to our own group, Airbus, for whom we act as a privileged partner, but also to external clients.
With more than 1.600 experienced professionals based in Germany, France and the UK, we service large-scale contracts with companies such as critical infrastructures (CNI), other industries and public institutions. Our positioning and strategy enable us to meet the highest standards of the market and to meet the challenges of tomorrow as a team... together with you!
Our location is just a stone's throw away from Munich, the beautiful state capital of Bavaria. Do you like sports and other outdoor activities? The Alps and Lake Starnberg are just an hour away and offer a wide range of leisure activities.
If desired, your place of work can also be flexibly determined between our locations within Germany, provided the company agrees. These are as follows: Ottobrunn (Munich area), Donauwörth, Friedrichshafen, Cologne, Finkenwerder (Hamburg). If the company agrees, the specified location will be agreed in writing in your employment contract as part of the hiring process.
Your advantages

Mobile working and flexible working hours
Fair and attractive remuneration and special payments
30 days' holiday and additional days off for special occasions
Intensive induction and expert support as part of onboarding in the form of personalized onboarding with a personal mentor
Excellent training opportunities and promising development prospects
Attractive social benefits and offers, including employer-financed pension scheme, employee share options, discounted car leasing, bike leasing, special conditions for insurance, employee benefits at cooperating companies
On-site facilities (depending on location) e. g. canteen and cafeteria, fitness studio, on-site kindergarten, company medical service and other health-related services

Your main tasks

Conduct regular information security risk assessments using qualitative and/or quantitative methods, develop security strategies in collaboration with internal teams and stakeholders and propose corrective measures for medium to big consulting projects
Develop and implement security policies and procedures for the entire organization, ensure that policies and procedures comply with cybersecurity regulations and best practices and raise awareness of security policies and train employees on best practices
Definition and monitoring of functional and technical mitigation plans, methodological and technical monitoring, data analytics and mathematical modeling
Plan and lead small consulting projects and significantly participate to consulting projects of medium to big size
Apply consulting methods independently while documenting and presenting results internally and externally
Design and delivery of awareness and training to internal and external customers
Improvement of existing processes and toolings and involvement of technical experts to guarantee successful delivery and training of (junior) consultants
Regular advice to customers for possible further support (cross-/up-selling) and Bid preparation for small to medium sized projects or significant support for big sized projects
Conduct internal audits to verify compliance and recommend improvements if necessary
Collaboration in the preparation of offers and company presentations
Taking on functional and/or project-related tasks in projects (e. g. technical project planning, topic responsibility)

Required Expertise And Skills

The work task requires knowledge and skills that are generally acquired through a relevant, completed degree programme with a standard duration of up to 4 years in the field of engineering, computer science, cybersecurity or comparable degree programmes and a related extended subject-specific additional qualification. The overall required knowledge and experience may have been acquired in other ways
Extensive knowledge and experience in the above listed tasks
Deep understanding of major security management frameworks (ISO 27001, NIST CSF, OT Governance, ISO 27005, ISO 31000, any risk methodology),
Deep understanding of security technologies, controls, and best practices
Ability to develop and maintain security policies, procedures, and standards
Proven extensive experience leading Governance projects and security initiatives, strong experience with ISMS implementation and security requirements at any level is a plus,
Extensive Knowledge of regulatory requirements across industries (Export Control, GDPR, NIS2, Defense, EASA Regulations) and proven experience with GRC platforms and risk management tools
Exceptional ability to communicate complex security concepts to non-technical stakeholders, strong presentation and report writing skills for executive-level audiences and strong negotiation and influence skills, stakeholder management at executive level
Ability to advise the customer regarding his request and objectives and to build consensus among diverse stakeholders
Cultural sensitivity for working with international teams
German and English: negotiation level mandatory (speaking and writing)
Willingness to travel domestically and abroad

Company

Contract Type

Experience Level

Job Family

Seniority level

Seniority level
Mid-Senior level

Employment type

Employment type
Full-time

Job function

Job function
Information Technology
Industries
Business Consulting and Services

Referrals increase your chances of interviewing at Airbus Protect by 2x

(Senior) Consultant / Manager Cyber Security (all genders)

Global Lead Certification and Training Manager Cyber Security 100%

Information Security Officer (ISO) (w|m|d)