IT Security Consultant
Core
Consulting on IT security requirements, threat landscape analysis, and regulatory compliance to ensure information security across Evonik's IT environment.
Role type
IT Security Consultant
Builds
Security assessments, risk reduction strategies, and IT security standards for Evonik's IT product groups and M&A projects.
Domain
Information Security / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
IT security concepts and protocols, risk analysis, vulnerability assessment, security strategy development, knowledge of ISO 2700x and NIST frameworks, M&A due diligence security assessment
Preferred skills
CISM, CRISC, ISO 27001 Lead Auditor, CISSP certifications, German language proficiency
Technologies
ISO 27001, ISO 27005, NIST Cyber Security Framework, KRITIS
Responsibilities
Analyze threat landscape and review regulatory requirements, monitor IT security level and assess residual risks, develop and implement IT security methodologies, consult IT product groups on security matters, support M&A due diligence and integration, contribute to IT group standards
Seniority
Mid-Senior, hands-on IC
