Business Continuity & Risk Manager (m/f/d)

Corporate-wide coordination of risk management processes and reporting – across strategic, financial, operational and IT-related risk fields (central interface and reporting to GRC) Care and further development of the risk management system (Risk Register) including ensuring data quality, completeness and timely updates by the Risk Owner Support for internal and group-wide risk management initiatives, souverän communicates both in German and in English Training and support for managers and department managers (Risk Owner) in identifying, evaluating and mitigating risks and defining appropriate controls Regular verification of the effectiveness of controls (Control Testing / Assurance) and implementation and follow-up of measures in case of deviations Construction, maintenance and further development of Business Continuity Management (BCM) including emergency and crisis processes Implementation and maintenance of business impact analyses (BIA) for identifying critical business processes, dependencies and recovery priorities Creation, maintenance and regular testing of emergency plans and BCM measures (e.g. report chain checks, tabletop exercises, recovery tests) in cooperation with the departments Coordination with the Information Security Officer (ISO / ISB) to coordinate BCM risk management and information security requirements Follow-up of NIS-2 compliance measures and ensure the timely implementation and documentation Support for audits/tests (e.g. BSI), including preparation, evidence management and tracking of Findings and repair Care and development of relevant policies / Policies (Risk, BCM, Emergency Management) including review cycles, versioning and communication

Complete studies in the field of economics, (economic) informatics, law or a comparable subject – ideally focusing on risk management and compliance First to multi-year professional experience in the field of GRC, risk management, business continuity management or compliance – ideally in a regulated environment Knowledge of the development and operation of BCM structures including the implementation of business impact analyses (BIA) and emergency/crisis exercises Experience in working with risk management software / GRC tools as well as in creating structured reports and management presentations Basic understanding of relevant regulatory requirements (e.g. NIS-2, KRITIS, GDPR, IT Security Act) and the ability to consistently track action implementations Embossed analytical thinking capacity as well as a structured and independent way of working Communication strength and enforcement capacity Safe occurrence in dealing with different stakeholders and hierarchical levels Solution-oriented and cooperative approach High discretion and credibility Loadability and learning readiness German and English language skills in word and writing

Your workplace: modern working conditions in the heart of Hamburg, good connection by public transport, in-house canteen, flexible work with the possibility to work in the home office (40% mobile work) salary and social benefits: 13.5 salaries, allowance for JobTickets, JobRad, asset-effective benefits and allowance for occupational pensions, 30 days of annual leave, tank deputate Work-Life-Balance: Recreational Area, WELLPASS Grant, Operational Health Promotion and External Staff Consulting Further development possibilities: individual seminars or group trainings