Data Engineer
Hybrid
Core
Conduct enterprise-wide information security risk assessments, identify and analyze threats/vulnerabilities, and define risk treatment measures.
Role type
Information Security Risk Manager
Domain
Cybersecurity / IT Risk Management
Required skills
ISO/IEC 27005, ISO/IEC 27001, GDPR (DSGVO), NIS-2 Directive, Threat Analysis, IT Architecture Assessment, Risk Register Management
Responsibilities
Perform enterprise-wide information security risk assessments, Identify and analyze threats and vulnerabilities, Create and maintain risk registers, Coordinate technical and organizational risk mitigation measures, Derive and track measures with effectiveness controls, Create regular risk reports for management, Support projects and IT services in the risk management process
Seniority
Mid-level, hands-on specialist