Data & Risk Management Specialist (H/F)
Core
Define and maintain the organization's Cybersecurity Risk Management Framework, ensuring alignment with NIS2 and ISO27005 standards.
Role type
Senior IC Cyber Risk Management Specialist
Builds
Cyber Risk Register, Risk Taxonomy, KPI/KRI dashboards, and regulatory compliance reports for the CISO and Risk Committee.
Domain
Cybersecurity / Information Security Governance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cyber risk assessment methodologies, NIS2 framework knowledge, ISO 27001/27005 standards, GRC tool proficiency, risk appetite definition, third-party risk integration, IT project risk management, audit coordination, regulatory monitoring
Preferred skills
CRISC, CISM, CISSP, ISO 27001 Lead Implementer, FAIR certification, technical challenge capabilities, non-technical audience presentation
Technologies
NIS2, ISO 27001, ISO 27005, NIST, GRC tools
Responsibilities
Define and maintain the Cybersecurity Risk Management Framework; Organize and coordinate Cyber Risk Assessments; Consolidate risks from security teams; Produce KPI/KRI and dashboards for the CISO; Challenge technical treatment plans; Integrate third-party risks; Contribute to IT project risk management; Prepare audit evidence and participate in resilience exercises; Monitor risk exceptions and accepted risks; Report regularly to the CISO and governance bodies.
Seniority
Senior, hands-on IC
