CYBER SECURITY GRC CONSULTANT (D/F/M)

CYBER SECURITY GRC CONSULTANT responsible for conducting information security risk assessments, contributing to security strategies, and ensuring regulatory compliance across consulting projects. Roles include development and implementation of security policies, preparation of offers/presentations, conducting internal audits, awareness and training design, and collaboration with account teams for cross-/up-selling. Requires strong knowledge of major security frameworks (ISO 2700X, BSI IT-Grundschutz, NIST CSF, ISO 31000), regulatory requirements (GDPR, NIS2), ISMS implementation experience, and ability to communicate complex concepts to non-technical stakeholders in German and English. Travel domestically and abroad; flexible placement among Germany locations (Munich area, Ottobrunn, Donauwörth, Friedrichshafen, Cologne, Hamburg area) with on-site work at designated offices.