About the Role
We are seeking experienced consulting professionals with a focus on Governance, Risk & Compliance and BSI IT-Grundschutz to expand our Public Sector Cybersecurity team.
Responsibilities
- Advise public institutions on establishing and enhancing governance, risk, and compliance structures.
- Support transformation projects for implementing secure and modern solutions in the public sector.
- Develop and implement IT security governance frameworks.
- Create security concepts according to BSI Standard 200-2.
- Identify, assess, and document IT security risks.
- Ensure compliance requirements and support their implementation.
- Conduct security audits and gap analyses.
- Design workshops and training sessions for government employees on awareness and best practices.
- Evaluate cloud security measures with established cloud service providers.
Requirements
- Degree in Computer Science, Business Informatics, or a comparable qualification.
- Several years of experience in Governance, Risk & Compliance, ideally approximately 3-5 years or more.
- BSI IT-Grundschutz certification in the current version.
- Very good understanding of public IT security requirements and current threat landscapes.
- Familiarity with ISMS, threat modeling, structural analysis, and Grundschutz-Check.
- Experience in creating security concepts, ideally also in the context of Business Continuity Management.
- Very good German language skills, ideally at least C1, and very good English language skills.
- Analytical thinking, active listening, convincing presence, and a solution-oriented approach.
Skills
- Governance, Risk & Compliance
- BSI IT-Grundschutz
- ISMS
- Threat modeling
- Structural analysis
- Grundschutz-Check
- Security concepts
- Business Continuity Management
- Cloud Security
- NIS2
- BSIG
- IT-SIG
- KRITIS-DachG
- CRA
- DSGVO
- KI-VO
- CISA
- CISM
- CISSP
- TISP
Location
- Germany
Work Type
- Hybrid
- Full-time
Experience Level
- Senior
- 3-5 years or more
Education Level
- Degree in Computer Science, Business Informatics, or a comparable qualification
About the Company
- Our client is an internationally active IT service provider that supports large enterprise and public sector organizations in modernizing, securing, and further developing their IT landscapes.
