Security Risk Manager
Core
Operate and continuously improve the security risk management framework across multiple Deutsche Telekom legal entities, supporting local risk managers through consultation, training, and GRC tool usage.
Role type
Senior IC Security Risk Manager (GRC)
Builds
Security risk management services and harmonized governance practices for a multinational environment
Domain
Information Security / Cybersecurity / Risk Management
Required skills
Security risk management frameworks (ISO 27005, NIST RMF), Information security standards (ISO 27001, NIST, CIS), GRC tools (ServiceNow, Archer, OneTrust), Risk identification and assessment, Risk mitigation monitoring, KPI and metrics analysis, Top 10 risk reporting, Stakeholder management, Training and upskilling
Preferred skills
Training and coaching experience, Shared service or internal consulting model experience, CRISC, CISM, CISSP, COBIT, ITIL
Technologies
ServiceNow, Archer, OneTrust, GRC platforms
Responsibilities
Operate and improve security risk management processes and policies, Ensure alignment with group-level security standards, Support integration of risk management into business and IT processes, Act as a trusted advisor for legal entities on security risk topics, Train and upskill local risk managers, Provide hands-on guidance during risk identification, assessment, and treatment, Assist in risk creation, maintenance, and lifecycle management within the GRC tool, Collect user feedback and represent business needs for process improvements, Identify and manage security risks with stakeholders, Monitor and support risk mitigation actions, Ensure risks are properly documented and audit-ready, Prepare and maintain Top 10 risk reports and quarterly summaries, Define and analyze risk KPIs and metrics, Provide management with insights on risk trends
Seniority
Senior, hands-on IC
