BASF

BASF ist eines der weltweit führenden Chemieunternehmen, das innovative Lösungen für verschiedene Industrien bietet.

title

<h2 class='jobSectionHeader'>WAS DICH ERWARTET</h2><ul><li>Teil des Cyber Governance, Risk and Compliance Teams, das das Cyber Security Framework für die BASF Gruppe managt.</li><li>Enge Zusammenarbeit mit der globalen Datenschutzorganisation.</li><li>Identifizierung, Bewertung und Priorisierung von Risiken für BASFs Informationswerte, insbesondere für die Verarbeitung personenbezogener Daten.</li><li>Etablierung von Prozessen zur Sicherstellung angemessener Cyber-Sicherheitskontrollen zur Risikominderung.</li><li>Definition gruppenweiter Cyber-Sicherheitsstandards für Systeme, die personenbezogene Daten verarbeiten, basierend auf einem risikobasierten Ansatz.</li><li>Durchführung von Risikoanalysen, Bedrohungsmodellierungen und Schwachstellenbewertungen zur Unterstützung der Identifizierung von datenschutzbezogenen Risikobereichen.</li><li>Zusammenarbeit mit Stakeholdern zur Pflege eines Risikoregisters und zugehöriger Risikobehandlungspläne.</li><li>Beratung und Unterstützung der Organisation in Best Practices des Risikomanagements, insbesondere bei der Verarbeitung personenbezogener Daten.</li></ul><h2 class='jobSectionHeader'>ANFORDERUNGEN AN DIE POSITION</h2><ul><li>Bachelor-Abschluss in Informatik, Informationstechnologie oder einem verwandten Bereich.</li><li>5-7 Jahre Berufserfahrung.</li><li>Erfahrung in der Entwicklung, Implementierung und Wartung eines ISMS basierend auf ISO 27001 oder anderen relevanten Standards.</li><li>Fundierte Erfahrung im Bereich Cyber-Sicherheit, insbesondere im Cyber-Sicherheitsrisikomanagement.</li><li>Starkes Verständnis von Risikomanagementprinzipien und -praktiken.</li><li>Erfahrung mit Risikoanalysen, Bedrohungsmodellierungen und Schwachstellenbewertungen.</li><li>Kenntnisse der relevanten Gesetze und Vorschriften im Bereich Cyber-Sicherheit.</li><li>Überdurchschnittliche Kenntnisse im Datenschutzrecht und Leidenschaft für Datenschutz.</li><li>Leidenschaft für die Zusammenarbeit in einem internationalen (regulatorischen) Umfeld.</li><li>Exzellente Kommunikations- und zwischenmenschliche Fähigkeiten.</li><li>Relevante Zertifizierungen wie CISSP, CISM, CRISC sind von Vorteil.</li><li>Sichere Kommunikation in Englisch, sowohl mündlich als auch schriftlich.</li></ul><h2 class='jobSectionHeader'>WAS WIR BIETEN</h2><ul><li>Sichere Arbeitsumgebung, da Gesundheit, Sicherheit und Wohlbefinden oberste Priorität haben.</li><li>Flexible Arbeitszeiten und Home-Office-Optionen.</li><li>Weiterbildungs- und Entwicklungsmöglichkeiten.</li><li>23 Urlaubstage pro Jahr.</li><li>5 zusätzliche Tage (Anpassung).</li><li>2 Kulturtage.</li><li>Eine kollaborative, vertrauensvolle und innovative Arbeitsumgebung.</li><li>Teil eines internationalen Teams und Arbeit an globalen Projekten.</li><li>Umzugsunterstützung nach Madrid wird angeboten.</li></ul>

Informatik, Informationstechnik

Bachelor

Festanstellung

Senior

Englisch

Deutsch

Tauche ein in die Welt der Cyber-Sicherheit und gestalte die Zukunft der BASF Gruppe mit. Du identifizierst Risiken und entwickelst Sicherheitsstandards. Bist du bereit, die Herausforderung anzunehmen? Mache jetzt den Test und finde heraus, ob du geeignet bist.

<div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>ABOUT US </b></H2></div><div><p><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">At BASF Digital Hub Madrid we develop innovative digital solutions for BASF, create new exciting customer experiences and business growth, and drive efficiencies in processes, helping to strengthen BASF´s position as the digital leader in the chemical industry. We believe the right path is through creativity, trial and error and great people working and learning together. Become part of our team and develop the future with us - in a global team that </span><span style="font-family:Arial, Helvetica, sans-serif">embraces diversity and equal opportunities.</span></span></p><p> </p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>WHAT YOU CAN EXPECT </b></H2></div><div><p><span style="font-size:14.0pt">You will be a part of our Cyber Governance, Risk and Compliance Team which manages the Cyber Security Framework for the whole BASF Group. Additionally, you will work closely with our global data privacy organization.</span></p><ul><li style="font-size:14.0pt"><span style="font-size:14.0pt">Identifying, assessing, and prioritizing risks to BASF’s information assets, with a particular focus on those information assets used for processing personal data.</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Establishing a process to ensure that appropriate cyber security controls are in place to mitigate those risks.</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Defining group-wide cyber security governance standards for the systems, assets, or platforms used for processing personal data based on a risk-based approach.</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Collaborating closely with the global data privacy organization of BASF.</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Facilitate operational risk assessments, threat modeling, and vulnerability assessments to support identification of of data protection-related risk areas within the organization's systems and infrastructure.</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Collaborate with stakeholders to maintain a risk register and associated risk treatment plans</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Providing guidance and support to the organization on risk management best practices, with a particular focus on the processing of personal data, including the implementation of new processes and controls.</span></li></ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">REQUIREMENTS OF THE POSITION </H2></div><div><ul><li style="font-size:14.0pt"><span style="font-size:14.0pt">Bachelor’s degree in computer science, Information Technology, or a related field</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">5-7 years of work experience</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Experience with developing, implementing, and maintaining an ISMS based on ISO 27001 or other relevant standards</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Profound experience in cyber security, particularly in cyber security risk management</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Strong understanding of risk management principles and practices, especially in the field of risk aggregation as well as definition and evaluation of generic risks on enterprise level</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Experience with risk assessments, threat modeling, and vulnerability assessments</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Knowledge of relevant laws and regulations related to cyber security</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Above-average knowledge of data protection law as well as a passion for data protection. Professional expertise in this environment would be an advantage.</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Passion to cooperate in an international (regulatory) environment</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Excellent communication and interpersonal skills, with the ability to work effectively with interdisciplinary teams</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Relevant certifications such as CISSP, CISM, CRISC are a plus</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Confident communication in English, both spoken and written.</span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt">Confident communication in English, both spoken and written.</span></li></ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>WHAT WE OFFER</b></H2></div><div><ul><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">A secure work environment because your health, safety and wellbeing is always our top priority.</span></span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">Flexible work schedule and Home-office options, so that you can balance your working life and private life.</span></span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">Learning and development opportunities</span></span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">23 holiday days per year</span></span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">5 additional days (readjustment)</span></span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">2 cultural days</span></span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">A collaborative, trustful and innovative work environment</span></span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">Being part of an international team and work in global projects</span></span></li><li style="font-size:14.0pt"><span style="font-size:14.0pt"><span style="font-family:Arial, Helvetica, sans-serif">Relocation assistance to Madrid provided</span></span></li></ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:16.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"><b>HOW TO REACH US</b></H2></div><div><p><span style="font-family:Arial, Helvetica, sans-serif;font-size:14.0pt">If you're interested in the position or know someone who might be and need support on how to take next steps, please send an email to felipe.bianco@partners.basf.com</span></p></div></div></div>

Zusätzliche Infos - gehören nicht zur Beschreibung:
{
  "employer": "BASF Digital Solutions S.L.",
  "city": "Madrid",
  "stateabbr": "",
  "country": "ES",
  "postalcode": "",
  "department": "ATS_WCMS_WEBFORM",
  "category": "Digitalization",
  "locale": "en_US",
  "productservice": "",
  "posteddate": "Fri, 06 06 2025 00:00:00 GMT",
  "requiredcertification": "",
  "recruiterid": "",
  "customfield3": "f23",
  "customfield4": "l4",
  "customfield5": "t3",
  "brand": "dark_blue_EMEA"
}

IT-Security

Risk / Compliance Management

Beratung / Consulting

Teilweise im Homeoffice möglich

Du bist Teil des Cyber Governance, Risk and Compliance Teams und managst das Cyber Security Framework für die BASF Gruppe. Du identifizierst Risiken, etablierst Sicherheitsprozesse und arbeitest eng mit der globalen Datenschutzorganisation zusammen.

ISMS Entwicklung

ISO 27001

Cyber-Sicherheitsrisikomanagement

Risikomanagementprinzipien

Risikobewertungen

Datenschutzrecht

CISSP

CISM

CRISC

Cyber Security Framework managen

Risiken identifizieren und bewerten

Cyber-Sicherheitskontrollen etablieren

Cyber-Sicherheitsstandards definieren

Risikoanalysen durchführen

Risikoregister pflegen

Organisation beraten

Cyber Security Risk Manager (m/f/d)

Gelegentliche Reisebereitschaft nötig

Estadio Santiago Bernabéu, Avenida de Concha Espina, Madrid, Spanien

Avenida de Concha Espina, Madrid, Spanien

WAS DICH ERWARTETTeil des Cyber Governance, Risk and Compliance Teams, das das Cyber Security Framework für die BASF G...