Head of Information Security Governance, Risk and Compliance; m​/w​/d

Head of Information Security Governance, Risk and Compliance (m/w/d)

Responsibilities:

• Manage and lead GRC teams
• Develop and implement GRC strategy and framework
• Oversee information security risk assessments and identify potential threats and vulnerabilities
• Cover GRC in scope of IT, OT, and Product Security in collaboration with stakeholders
• Develop and enforce policies and procedures to manage cyber risks
• Monitor and report on compliance with regulations and standards on a strategic level
• Manage awareness and training programs
• Collaborate with business units to ensure compliance
• Drive innovation in GRC delivery by embedding AI and intelligent automation into core processes
• Contribute to the AI governance framework

Qualifications:

• Bachelor’s or Master’s in Cybersecurity, Computer Science, Cybersecurity Risk Management, or related field
• 5+ years in GRC roles and 3+ years in leadership positions preferred
• Preferred certificates: CISSP, CISM, ISO 27001 Lead Auditor/Implementer, ITIL or COBIT certifications
• English required;
  German and French are a plus
• Strong understanding of GRC frameworks and methodologies
• Knowledge of relevant regulations and standards
• Information Security risk assessment and management skills
• Practical understanding of AI (generative and agentic) to strengthen and automate GRC, familiarity with AI governance and risk frameworks
• Forward‑looking, innovation‑oriented mindset with proven experience of modernizing processes
• Excellent communication and presentation skills
• Readiness for global travel

Our offer:

We offer a secure job, progressive and family‑friendly employment conditions such as flexible working hours, hybrid working, and opportunities for further training.