Senior Associate, Information Security(m/w/x)

Requirements

• Proactive and ownership-driven mindset
• Balance of rigor and pragmatism
• Clear and persuasive writing skills
• Constructive challenging and evidence improvement
• Collaboration and calmness under pressure

Tasks

• Own and maintain parts of the ISMS
• Implement measurable security policies and standards
• Support security-by-design governance for new initiatives
• Plan and run audit readiness activities
• Manage audit timelines and evidence plans
• Coordinate stakeholders for internal and external audits
• Review evidence for quality, completeness, and traceability
• Challenge gaps and drive remediation with control owners
• Draft responses to auditors and internal stakeholders
• Maintain action plans and verify closure
• Facilitate risk assessments for systems, projects, and vendors
• Document risk outcomes and treatment plans
• Maintain the quality of the risk register
• Identify systemic themes and control weakness patterns
• Propose improvements to reduce residual risk
• Lead third-party risk management and due diligence reviews
• Track vendor remediation commitments
• Support security contractual requirements
• Partner with Procurement and Legal on vendor security
• Test control design and operating effectiveness
• Document results and recommend control improvements
• Produce GRC reporting and metrics for leadership
• Report on audit status and risk trends
• Improve GRC workflows through automation and tooling

Work Experience

EducationMore information about education requirement

Languages