Senior IT Risk & Governance Manager

Your tasks:

Consolidation, control, and continuous further development of the IT Risk portfolio
Conducting risk analyses as well as moderation of regular risk reviews
Identification, assessment, and structured tracking of technical and organizational risks
Coordination and monitoring of risk mitigation measures across various teams
Control of security, compliance, and governance topics
Creation of management reports, risk overviews, and decision-making bases
Stakeholder management across operations, security, delivery, and other IT teams
Support of the Product Owner regarding governance, risk, and security issues
Ensuring transparent communication and escalation of relevant risks
Further development and optimization of existing risk and governance processes
Support with audit, compliance, and regulatory requirements

Your profile:

Completed studies in computer science, business informatics, information security, or a comparable technical education or corresponding professional experience
Several years of experience in IT Operations, Service Management, or DevOps environments
Sound practical experience in IT Risk Management as well as in the analysis and assessment of technical and organizational risks
Very good knowledge of information security, security governance, and compliance
Experience in conducting and moderating risk reviews as well as the control of risk mitigation measures
Distinct experience in stakeholder management within complex IT organizations
Ability to prepare complex technical and organizational matters in a structured manner for management and decision-making bodies
Experience in the creation of management reporting and decision-making bases
Good knowledge of Jira and Confluence
Knowledge of ISO 27001, NIST, COBIT, or comparable security and governance frameworks is an advantage
Experience with audit, compliance, or regulatory requirements is an advantage
Knowledge of operating business-critical applications in cloud environments is an advantage
Understanding of DevOps, SRE, and modern IT operating models
Experience with the governance of application portfolios is an advantage
Certifications such as CISSP, CISM, CRISC, or ITIL are an advantage
Very good German skills as well as good English skills

Automatically translated from the original.

Posted 1 week ago

Location