GRC-Experte (all genders)
Core
Develop and implement an integrated GRC approach (ISMS, Data Protection, ITSMS, Compliance, IKS) and advise business units on GRC matters.
Role type
GRC Expert (Information Security, Compliance, Risk Management)
Builds
Transparent control and reporting structures for management and board
Domain
IT Security, Compliance, Risk Management
Required skills
Knowledge of regulations (GDPR, NIS2, AI Act, KRITIS), Risk analysis, Internal auditing, Management systems (ISO 27001, ISO 20000), Control implementation, Corrective action management
Preferred skills
CISA, CRISC, ISO 27001 Lead Auditor certifications
Technologies
ISO 27001, ISO 20000, GDPR, NIS2, AI Act, KRITIS
Responsibilities
Harmonize policies, procedures, controls, and evidence; Plan and conduct risk analyses on IT and organizational levels; Translate regulatory requirements into actionable controls; Lead internal audits and support external audits/certifications; Develop practical guidelines and templates for business units
Seniority
Mid-Senior, hands-on IC