Governance, Risk & Compliance (GRC) Expert (m/f/d)

Welcome to CBTW! We are an innovative team with over 3,000 employees in 21 countries and a leader in Strategy & Governance, Software Engineering, Data Analytics & AI, and more.

As a Governance, Risk & Compliance (GRC) Expert, you will strengthen our Cybersecurity Service Line. Together, we protect companies from ever-evolving cyber threats, ensure regulatory compliance, and enhance the security of digital assets.

At CBTW, you will work on exciting client projects while contributing your expertise to our internal Security Community. If you are interested in shaping security strategies, analyzing risks, and making organizations more resilient, we look forward to getting to know you!

Responsibilities

Strategy & Governance

• You will support our clients in defining and implementing their information security strategy.
• You will organize, structure, and manage security projects.
• You will implement and further develop Information Security Management Systems (ISMS).
• You will work on the creation and further development of security policies and processes (e.g., Incident Response, Security Policies).

Risk Management

• You will analyze and assess security risks using established frameworks (e.g., ISO 27005, EBIOS RM).
• You will identify and monitor operational, compliance, and security risks.
• You will define and implement security KPIs to measure security performance.

Compliance & Regulation

• You will support clients in complying with relevant cybersecurity and data protection regulations (e.g., NIS2, DORA, GDPR, NIST).
• You will analyze the security status of organizations and identify improvement measures.
• You will conduct internal audits and support compliance processes.

Incident Management

• You will coordinate the response to security incidents and support their analysis.
• You will monitor action plans after incidents or audits and ensure their implementation.
• You will develop measures to improve the security posture.

Training & Awareness

• You will conduct training and awareness measures on information security and GRC policies.
• You will promote the adoption of security standards and best practices within organizations.

In addition to your work on client projects, you will also contribute your experience to our internal Security Community at CBTW, sharing knowledge and best practices with colleagues.

Qualifications

Your Talent

• Completed Bachelor's or Master's degree in Cybersecurity, Information Security, or a comparable qualification.
• At least 5 years of experience in a comparable role in Governance, Risk & Compliance, or Information Security.
• In-depth knowledge of the ISO 2700X standards (ISO 27001, ISO 27002, ISO 27005).
• Experience with risk management methods such as EBIOS RM.
• Knowledge of relevant regulatory requirements such as NIS2, DORA, or GDPR.
• Experience in implementing or further developing an ISMS.
• Very good analytical skills and a structured way of working.
• Fluent German and English skills.
• Certifications such as ISO 27001 Lead Implementer / Lead Auditor or ISO 27005 Risk Manager are advantageous.
• Further certifications such as CISM, CISSP, CRISC, or CISA are a plus.
• Willingness to travel within the DACH region.
• Salary range for this position (Medior-Level): €65,000 – €75,000 gross/year. Final classification will depend on experience and skillset.

Benefits

At CBTW, you can expect more than just a job – we offer you an environment where you can grow, co-create, and be your authentic self. Our culture is based on trust, personal responsibility, and genuine collaboration – whether remote or on-site. We drive innovation together, celebrate successes, and live diversity. The fact that we have been recognized as a "Top Company" by kununu for five consecutive years confirms us on our path.

This awaits you with us:

🏁 Onboarding & Team Spirit

• Welcome Day, Hello Drink & Newbie Lunch
• Mentoring program for your ideal start
• Afterwork events, Summer Tech Event & festive Christmas party
• Joint social commitment in fundraising campaigns

🚀 Development & Career

• Individual career paths & regular feedback discussions
• Diverse in-house training, online courses & external further education
• International collaboration with colleagues from all over Europe

🧘‍♀️ Work-Life Balance & Flexibility

• Remote Work & Workation – within the EU and beyond
• Sabbatical opportunities & flexible working time models
• Public holiday calendar Baden-Württemberg plus the holidays of your federal state – double benefit
• 30 vacation days per year

💼 Equipment & Mobility

• Credits for equipping your mobile workspace
• Deutschlandticket or bicycle leasing – you have the choice
• Optional: BahnCard for even more travel flexibility

🛡️ Security & Provision

• Support with retirement provision & asset building
• Diverse options for financial security

💡 Wellbeing & Health

• Access to the Employee Assistance Program (EAP) – also for relatives

🎁 Other Goodies

• Bonuses for special commitment
• Exclusive benefits via our Corporate Benefits platform
• Our CBTW Spotify playlist for a musical impression of the team 🎧

You're the only one missing – we look forward to meeting you!

🎵 Check out our CBTW Spotify playlist: Listen to CBTW on Spotify

Find more English Speaking Jobs in Germany on Arbeitnow