Data & Risk Management Specialist (H/F)
Core
Define and maintain the organization's Cybersecurity Risk Management Framework, ensuring alignment with NIS2 and ISO27005 standards.
Role type
Senior IC cybersecurity risk management specialist
Builds
Cyber Risk Register, risk taxonomies, mitigation plans, and KPI/KRI dashboards for the CISO and Risk Committee
Domain
Cybersecurity governance and regulatory compliance (NIS2, ISO 27001, NIST)
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cybersecurity risk assessment methodologies, regulatory compliance mapping (NIS2, ISO 27001, NIST), GRC tool proficiency, stakeholder management with technical teams, analytical and written communication
Preferred skills
CRISC, CISM, CISSP, ISO 27001 Lead Implementer, ISO 27005, FAIR certification
Technologies
GRC tools
Responsibilities
Define and maintain the Cybersecurity Risk Management Framework, organize Cyber Risk Assessments, consolidate risks from security teams, track mitigation plans, produce KPI/KRI dashboards, prepare reporting for governance bodies, contribute to audits and gap assessments, define risk appetite thresholds, coordinate with IT, Legal, Compliance, and Internal Audit
Seniority
Senior, hands-on IC
