Risk and Compliance Officer

The IT Risk and Compliance Officer protects the confidentiality, integrity, and availability of the customers' information systems and advices the CISO and the business in defining and implementing necessary policies, controls, and procedures to cost-effectively assess and manage IT security-related risks.

IN DEPTH ROLES&RESPONSIBILITIES
 Responsible for implementing and maintaining the Risk Management Framework
 Coordinates information security-related risks
 Educates the workforce and participates in regulatory compliance activities, especially with regards to data privacy and security legislation.
 Assists the CISO with development, implementation, and maintenance of the ISMS, including policy governance, compliance with regulatory requirements, information security training and awareness initiatives, third-party audits and assessments, contract and procurement guidelines, and third-party risk.
 Carries the overall responsibility for monitoring and reducing compliance related topics, from both internal and external audits.

KEY LEADERSHIP/MANAGEMENT BEHAVIOUR/EXPERIENCE

• Degree (or equivalent) in Computer Science, Information Systems, or related field.

• Familiar with contractual compliance obligations, contractual security, privacy and completing security questionnaires and reviews.

• You have experience with Information Security Risk Management

• You have demonstrated ability to communicate complex or detailed technical topics to a non-technical business audience, clearly conveying risk assessments, actions needed, and cost implications.

• You have a general understanding of privacy and compliance legislation in Europe, including the GDPR.

• You have experience in working with legal, audit, and compliance staff.

• You have experience in developing and maintaining policies, procedures, standards, and guidelines.

• You have experience in driving risk-based decisions supporting business owner expectations and needs.

• You have a strong knowledge and experience of applicable frameworks and regulatory requirements, ISO27000, NIST, GDPR.

• You have a strong technical or engineering background, including but not limited to software development, scripting, infrastructure, networking or cloud architecture.

• Knowledge of ITIL processes and way of working

• You Talk and write fluent in English, understands the German language. Knowledge of other languages is seen as an asset.