(Senior) Cyber Security-Advisor (m/w/d) | Hybrid

T4D Consulting is a specialized boutique for digital transformation, cybersecurity, and AI-readiness with locations in Bad Nauheim and Mainz. You work with DAX and large companies from regulated industries – many of which are KRITIS-priority – and develop cyber-security strategies that really make an impact. What sets T4D apart from classical consulting firms: genuine content responsibility from the first mandate on, a proprietary method framework, and a working style that puts effect over presence.

Tasks

- You develop risk-based cyber-security strategies and roadmaps for DAX and KRITIS mandates – from readiness assessments to multi-year investment planning.

- You design Cyber Target Operating Models (CISO-Organization, roles, interfaces between IT, business, and compliance) and lead reorganizations actively up to the line management level.

- You build information security management systems based on ISO 27001/27002, BSI IT-Groundschutz, and NIST CSF, and integrate them into existing governance structures.

- You translate regulatory requirements – NIS2, DORA, KRITIS-Dachgesetz, BAIT/VAIT, IEC 62443, TISAX – into actionable programs.

- You conduct cyber risk assessments, maturity assessments, and benchmarkings, and create a reliable fact base for decisions.

- You design Security Operations Center (SOC) – including make-or-buy decision, use-case engineering, and tooling roadmap.

- You develop Third Party Risk Management and Cyber Due Diligence in the M&A context, including integration into procurement and vendor lifecycle processes.

- You advise decision-makers on departmental, area, or CISO-level, and translate technical risks into business language.

Qualification

- Very good university degree in computer science, business informatics, information security, or a comparable MINT field (Master preferred)

- 5-10 years of professional experience in cyber security (consulting or industry), including at least 3 years in strategy or governance roles

- At least one relevant certification: CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor

- Deep regulatory knowledge around NIS2, DORA, KRITIS-Dachgesetz, and sector-specific standards like BAIT/VAIT, IEC 62443, or TISAX

- Experience in at least one regulated industry: energy, pharma, healthcare, financial services, chemistry, or automotive/OT

- Fluent German (C1/C2) and English (C1), as well as travel readiness (30-50%, project-dependent)

Benefits

- End-to-end responsibility in mandates – you lead programs completely, not just individual workstreams.

- Direct access to cyber stakeholders at the client, mandate-dependent up to CISO-level.

- Work on eye level with experienced advisors – with genuine content responsibility from the first mandate on.

- The Friction Framework as a proprietary method, which you actively contribute to developing.

- Certification budget for CISSP, CISM, ISO 27001, and comparable topics.

- Latest equipment and proprietary AI solutions that take care of routine tasks – so you can focus on what really has an impact.

- Monthly focus days without mandate pressure – space for method work, reflection, and deep thinking.

- 2-3 team offsites per year for joint work on strategy, methodology, and team spirit.

- Fair hybrid travel policy: Bad Nauheim, Mainz, or remote, project-dependent 30-50% travel activity.

If you want to shape cyber security not just operationally but strategically – with genuine decision-making powers and mandates that have an impact – then T4D is the right place for you. Apply now and become part of a team that takes clarity, responsibility, and results seriously.

Find Jobs in Germany on Arbeitnow