Must have

• ServiceNow

• German (B2)

Nice to have

• English (C1)

Requirements description

• Educational Background: A Bachelor’s or Master’s degree in law, information technology, cybersecurity, computer science, or a related field is essential, though relevant working experience may be considered an equivalent.
• [3+] years of experience in cyber security, previous experience in a GRC role highly desired
• Proficiency in various cybersecurity tools and software, understanding of network infrastructure and security protocols, and knowledge of threat modeling and risk assessment techniques are helpful
• Profound knowledge of EU and German cybersecurity and data privacy legislation, such as NIS-2, KRITIS, DORA, GDPR, etc.
• Experience with policy writing
• Practical experience information security in a corporate or government setting is valuable, along with familiarity with information security standards and frameworks such as ISO/IEC 27001 and NIST
• Experience with risk management frameworks such as NIST Cybersecurity Framework or ISO 27001
• Certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) are desirable
• Dealing with high complexity and ability to think and act in a goal- and result-oriented manner
• English, fluent in written and spoken. German language skills would be a plus

Offer description

Sr. Cyber Security GRC Specialist

Responsible for developing, implementing, and managing cyber security Governance, Risk, and Compliance (GRC) initiatives within Bayer, measuring adherence to Bayer policies and procedures which are based on industry standards. Assessing compliance of Bayer processes, monitoring critical IT security deliverables, and providing audit support for cybersecurity teams. Also, managing IT security exceptions and recommending controls to address gaps through data and security risk assessments. Support preparation of alignment meetings with German workers councils to ensure that cybersecurity tools and processes are implemented in accordance with co-determination laws.

Your responsibilities

1. Perform risk management activities to identify, assess, and mitigate cyber security risks for Bayer. These include owning and management of the cybersecurity framework (in particular based on ISO/IEC 27001), measuring the effectiveness of this framework and driving for the maturity and to support business needs
2. Develop and maintain key performance indicators (KPIs) and metrics to measure the effectiveness of GRC initiatives.
3. Prepare regular reports for senior management on the status of GRC activities.
4. Collaborate with cross-functional teams to integrate GRC principles into business processes and systems
5. Provide consulting across the organization on matters of cybersecurity GRC
6. Monitor regulatory changes and industry trends to ensure the organization remains compliant and proactive in addressing emerging risks

show all (13)