Head of Information Security Governance, Risk and Compliance (m/w/d)

ph3Responsibilities /h3 ul liManage and lead GRC Teams /li liDevelop and implement the GRC strategy and framework. /li liOversee information security risk assessments and identify potential threats and vulnerabilities. /li liCovers GRC in scope of IT, OT, and Product Security in collaboration with stakeholders. /li liDevelop and enforce policies and procedures to manage cyber risks. /li liMonitor and report on compliance with regulations and standards on a strategic level. /li liManage Awareness and Training Programs. /li liCollaborate with business units to ensure compliance. /li liDrive innovation in how GRC is delivered by embedding AI and intelligent automation into core GRC processes. /li liContribute to the AI governance framework. /li /ul h3Competencies /h3 ul liBachelor’s/Master’s in Cybersecurity, Computer Science, cybersecurity Risk Management, or related field. /li li5+ years in GRC roles and 3+ years in leadership is preferred. /li liFollowing certificates are preferred; CISSP or CISM, ISO 27001 Lead Auditor/Implementer, ITIL or COBIT certifications. /li liEnglish is a Must, German and French are a plus. /li liStrong understanding of GRC frameworks and methodologies. /li liInformation Security Policy Management. /li liKnowledge of relevant regulations and standards. /li liInformation Security Risk assessment and management skills. /li liPractical understanding of how AI (generative and agentic AI) can be applied to strengthen and automate GRC, together with familiarity with AI governance and AI risk frameworks. /li liA forward‑looking, innovation‑oriented mindset, with proven experience of modernizing and improving processes. /li liExcellent communication and presentation skill. /li liReadiness for global travel. /li /ul h3Our offer /h3 pWe offer you a secure job, progressive and family‑friendly employment conditions such as flexible working hours, hybrid working and opportunities for further training. /p /p #J-18808-Ljbffr