Job
- Level
- Senior
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you manage security and risk assessments for M&A projects and define risk mitigation measures in areas like identity management and data protection.
Your role in the team
- Management of comprehensive security and risk analyses for strategic initiatives such as M&A transactions, post-merger integrations, carve-outs, as well as IT outsourcing and insourcing projects.
- Identification of project-specific high-risk areas, including identity and access management, network and system segmentation, data protection, as well as OT and product security.
- Definition of specific technical, organizational, and procedural measures for risk mitigation, as well as the assessment of their effectiveness, feasibility, and residual risk.
- Ensuring clear assignment, scheduling, and integration of measures into the project planning as well as tracking until implementation or formal risk acceptance.
- Preparation of decision-ready security assessments, escalation of unacceptable risks, and support during critical project phases such as Day 1, Cutover, Stabilization, and TSA exit.
- Representation of binding security requirements to project and program managers, as well as withholding security approvals until appropriate measures are implemented or formal risk acceptance is obtained.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in Information Security, Computer Science, Engineering, or a comparable qualification.
Qualifications
- Practical knowledge in areas such as Identity & Access Management, logical and physical separation, data responsibility and retention, as well as third-party and shared service risks.
- Independent, pragmatic, and results-oriented working style as well as sound decision-making ability even under time pressure and with incomplete information.
- Clear, fact-based, and assertive communication; relevant certifications such as CISM or ISO 27001 Lead Implementer/Auditor are advantageous.
Experience
- Typically eight to twelve years or more of professional experience in information security, ideally in complex M&A, transformation, separation, or sourcing projects.
- Extensive experience in managing security risks as well as developing concrete technical, organizational, and temporary protective measures.
This text has been machine translated. Show original
What we offer
- You can expect an exciting and varied role in an international environment, as well as an attractive benefits package that includes flexible working hours, sabbaticals, and remote work.
- In addition, you can work from abroad within the EU for up to twenty days a year.
- A wide range of training opportunities support your professional and personal development.
- In addition, you can look forward to numerous additional benefits, including sports and health programs, corporate volunteering, JobRad, subsidies for public transportation, and a modern company location with a diverse corporate cafeteria.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Health, Fitness & Fun
Higher Take-Home Pay
Topics You Will Work On
Job Locations
About Your Employer
Knorr-Bremse AG
Knorr-Bremse is the world leader in manufacturing brake systems and other subsystems for rail vehicles. Our 29,000 employees at over 100 locations in 30 countries around the world ensure mobility with technological excellence, sustainable economic practices, and social responsibility. We offer our employees a varied and challenging workload in an international setting, with attractive conditions such as flexible working hours, opportunities for professional and personal development, and health and fitness programs.
Description
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Industry, Production
Senior Security Architect - Strategic Initiatives
- Location
- Munich
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
