About the Role
This role serves as the bridge between business demand, IT architecture, cybersecurity, SOC, audit, compliance, procurement, privacy, and implementation teams. The individual will focus on reviewing technical concepts, stand-alone products, services, and AI-enabled solutions that the company plans to implement or integrate into its complex global enterprise technology landscape. The role ensures that security, compliance, architecture, operational, and business risks are identified, clearly documented, and addressed through effective and practical mitigation measures.
Responsibilities
- Manage the end-to-end Technology Demand Intake and Risk Assessment process for new technologies, platforms, tools, and AI-enabled solutions.
- Assess security, compliance, operational, vendor, and architecture risks; identify mitigation strategies and recommend risk treatment decisions.
- Prepare executive-ready reports and present findings to IT leadership, governance boards, and risk committees.
- Partner with Security, IT, Architecture, Procurement, Legal, Privacy, Audit, and business stakeholders to evaluate and approve technology solutions.
- Ensure new technologies comply with security policies, controls, and integration requirements.
- Maintain risk documentation, exception records, control evidence, and governance reporting while continuously improving intake processes.
- Stay current on emerging technologies, AI, cybersecurity trends, regulatory requirements, and industry control frameworks.
- Translate business requirements into security and compliance recommendations that enable timely technology decisions.
- Communicate complex technical concepts through presentations, decision papers, and executive-facing materials.
- Facilitate collaboration across IT architecture, infrastructure, business teams, vendors, and other stakeholders.
- Support vendor assessments, RFPs, technical evaluations, and solution reviews.
- Contribute to cross-functional IT projects by identifying dependencies, risks, and process improvements.
- Work effectively in agile, global project environments with multiple priorities and tight timelines.
Requirements
- Experience in a complex global environment, comparable consulting or service industries is preferred.
- 5+ years of experience in technology risk, cybersecurity, IT governance, GRC, IT audit, security architecture, or technology consulting
- Experience assessing SaaS, cloud, third-party, and AI-enabled solutions, with the ability to identify risks, mitigation strategies, and implementation requirements.
- Experience improving governance processes, workflows, standards, and risk management practices.
- Experience with security controls, risk assessments, compliance, audit support, and governance approval processes.
- Ability to evaluate platform architecture, integrations, identity and access management, data flows, encryption, logging, monitoring, and operational security.
- Understanding of enterprise architecture, cloud security, vendor risk management, and secure technology implementation.
Skills
- Strong knowledge of cybersecurity, technology risk management, compliance, enterprise IT governance, and emerging AI-enabled technologies.
- Knowledge of security and governance frameworks such as ISO 27001, SOC 2, ITIL, or similar.
Location
- Germany - Berlin
- Germany - Bonn
- Germany - Cologne
- Germany - Frankfurt/Main
- Germany - Hamburg
- Germany - Munich
Work Type
- Hybrid working
Experience Level
- 5+ years of experience
Education Level
- Bachelor’s Degree required – preferred in the area of Technology, MIS, Cybersecurity, etc.
Benefits
- Hybrid working
- Daycare allowance
- Corporate discounts
- Wellbeing support (e.g. Headspace)
- Healthy snacks and beverages provided
About the Company
- Simon-Kucher is a global consultancy with more than 2,200 employees in 30+ countries.
- As a trusted commercial advisor focused on unlocking better growth, we combine deep consulting expertise, growth specialization, and technology to scale lasting impact.
- We optimize every lever of commercial strategy – product, pricing, innovation, marketing, and sales – based on what customers want and value.
- With over 40 years of monetization experience, we are recognized as the world’s leading commercial growth and pricing specialist.
- simon-kucher.com
Equal Opportunity
- We believe in building a culture that embraces diversity, equity, and inclusion, creating an environment in which our people feel valued, are able to be themselves and feel their contribution matters.
- If we get that right, remarkable things will happen; people will grow faster, innovate, feel valued, and create better outcomes for everyone – our people, our clients and, of course, our business.
