Cyber Security Risk Manager with a focus on data protection (m/f/d)

WELCOME TO BASF

We as Global Digital Services enable BASF’s digitalization. In agile teams, we develop innovative digital solutions for BASF and its customers, create new exciting customer experiences and business growth, and drive efficiencies in processes. We provide IT that works and offer know-how and access to latest technologies in the areas of cloud computing, blockchain or big data.

WHAT YOU CAN EXPECT

You will be a part of our Cyber Governance, Risk and Compliance Team which manages the Cyber Security Framework for the whole BASF Group. Additionally, you will work closely with our global data privacy organization. 

• You are responsible for identifying, assessing, and prioritizing risks to BASF’s information assets, with a particular focus on those information assets used for processing personal data. 
• You will establish a process to ensure that appropriate cyber security controls are in place to mitigate those risks.
• Moreover you define group-wide cyber security governance standards for the systems, assets, or platforms used for processing personal data based on a risk-based approach. In addition, you will colaborate closely with the global data privacy organization of BASF.
• You will facilitate operational risk assessments, threat modeling, and vulnerability assessments to support identification of data protection-related risk areas within the organization's systems and infrastructure.
• Collaborating with stakeholders to maintain a risk register and associated risk treatment plans are also part of your responsibilities.
• Last but not least, you will provide guidance and support to the organization on risk management best practices, with a particular focus on the processing of personal data, including the implementation of new processes and controls.

WHAT YOU OFFER

• Master’s degree in computer science, Information Technology, or a related field with 5-7 years of work experience
• experience with developing, implementing, and maintaining an ISMS based on ISO 27001 or other relevant standards
• profound experience in cyber security, particularly in cyber security risk management
• strong understanding of risk management principles and practices, especially in the field of risk aggregation as well as definition and evaluation of generic risks on enterprise level
• knowledge of relevant laws and regulations related to cyber security as well as above-average knowledge of data protection law as well as a passion for data protection. Professional expertise in this environment would be an advantage.
• passion to cooperate in an international (regulatory) environment
• excellent communication and interpersonal skills, with the ability to work effectively with interdisciplinary teams
• confident communication in English, both spoken and written.

WHAT WE OFFER

• Inspiring networks for the development and implementation of your own ideas (e.g. Women in Business)
• Mentoring programs and learning opportunities for your professional and personal development
• Career paths as professional development to other positions in the company (also job rotation)
• Support with childcare (e.g. company crèche, holiday programmes)
• Fitness and health studio, medical center with numerous offers for your health
• Deutschlandticket as a discounted job ticket and job bike
• Mobile working in Germany
• Flexible working time models (e.g. part-time employment or job sharing)
• Attractive remuneration and a variable bonus

HOW TO REACH US

• Yulia Haars (Talent Acquisition), yulia.haars@basf.com, will be happy to answer your questions for this position
• You can also reach our recruiting team here
• The selection process includes a background check of the last diploma obtained and a criminal record certificate. Please submit the required documents only after our request.

ABOUT US

BASF Digital Solutions GmbH offers innovative solutions for the design and optimization of business processes for the BASF Group around the world. As an experienced business solution provider, we create added value for BASF by developing new business models with digital technologies, thereby increasing the efficiency and effectiveness of processes through IT and digital solutions. Learn more about BASF Digital Solutions GmbH at on.basf.com/DigitalServicesEN

Diversity is our greatest strength!

Become a part of our winning formula for success and develop the future with us - in a global team that embraces inclusion and equal opportunities irrespective of gender, age, origin, sexual orientation, disability or belief.