Group Information Security Risk Manager (m/f/d)

SAF-HOLLAND is an internationally leading manufacturer of chassis-related assemblies and components for trailers, trucks and buses. On six continents, SAF-HOLLAND employs around 5,500 dedicated employees. The product range includes axle and suspension systems for trailers as well as semi-trailers and coupling systems for trucks, trailers and semi-trailers as well as brake and EBS systems. In addition, SAF-HOLLAND develops innovative products to increase the efficiency, safety and environmental friendliness of commercial vehicles.

At SAF HOLLAND we are committed to an inclusive culture of mutual respect. Equality and diversity are a matter of course and part of our value culture. For more information, see the SAF-HOLLAND Group website. Become part of our success story.

Responsibility for the further development and standardization of global IT risk management as well as the establishment and implementation of the risk management process Group-wide aggregation and analysis of IT risks by establishing and maintaining a central risk register and ensuring that risks are fully recorded, evaluated and documented in the risk register Consistent driving of the topic within the organization Development, coordination and follow-up of Risk Treatment Plans in close cooperation with local Risk Owners, continuous communication with all relevant stakeholders and ensuring that measures are implemented, risks appropriately treated and decisions made transparent Creation of IT risk reports and management insights (including KPIs/KRIs, heatmaps and decision bases for top risks) Ensuring compliance and governance by incorporating regulatory requirements and supporting audits and global stakeholder management Integration of IT risk management in ISO 27001 / TISAX-compliant processes (Risk Assessment, Treatment, SoA) and consolidation into corporate risk management Support for the construction and operation of ISMS

Complete study in the field of computer science, business informatics, IT security or comparable qualification Multiannual experience in IT Risk Management, IT Security or IT Governance Experience in international corporate structures Experience with regulatory and normative requirements (e.g. NIS2, ISO 27001, TISAX) Understanding IT Risk Management Frameworks (e.g. ISO 31000, ISO 27005, NIST) Experience with GRC tools and reporting solutions Very good analytical and conceptual skills Embossed communication and presentation skills in German and English High self-initiative and structured working Enforcement and pronounced stakeholder management skills Strategic thinking and entrepreneurial understanding Ability to render complex facts understandable and addressable

Future-proof work Flexible working time design, possibility of mobile work Flat hierarchies with space for ideas and co-design Attractive framework conditions according to IG Metall, e.g. 30 days holiday claim Training and training opportunities Corporate Benefits and other benefits for our employees