Cybersecurity Specialist (f/m/d) - Governance, Risk, and Compliance (GRC)

Do you want to help shape the future of healthcare? At Siemens Healthineers, we rely on people who dedicate their energy and passion to this goal – as our company name suggests. Siemens Healthineers stands for the pioneering spirit of our employees, paired with our long tradition as a leading global technology group in the constantly dynamic healthcare industry. We offer a flexible and dynamic environment full of opportunities to grow beyond yourself in order to develop personally and professionally. Does that sound interesting to you?

Then become part of our global team as a Cybersecurity Specialist (w/m/d) for Governance, Risk and Compliance (GRC) to actively help shape Corporate Cybersecurity Governance.

Our goal is to define and anchor requirements and processes in the field of cybersecurity to ensure compliance with cybersecurity regulations as well as the confidentiality, integrity, and availability of our data based on internal and external requirements. In your role, you will work closely with Cybersecurity and Quality across all business areas, functions, and regions, and explain our policies and standards as needed. We operate in a dynamic, fast-paced environment. This requires a high degree of adaptability to constantly changing processes and technologies related to new threats, risks, and controls.

Choose the best place for your work - as part of this position, it is possible, in coordination with your manager, to work mobile (within Germany) for an average volume of up to 60% of the respective working time.

Even more flexibility? Mobile working from abroad is possible under certain conditions and in selected countries for up to 30 days per year.

Your tasks and responsibilities:

• You are responsible for the identification, management, and coordination of cybersecurity risks related to our controls.
• You further develop our Cybersecurity Risk Management to increase scope and transparency.
• You take over the governance of Cybersecurity Threat Management and integrate threats into risk and control management.
• You coordinate the integration of external laws, standards, and regulations into our Control Framework.
• You act as a "Human-in-the-loop" and are thus responsible for verifying the results of our AI-based mapping of external laws and standards to our internal cybersecurity controls.
• Furthermore, you coordinate cooperation with our Enablement team to communicate changes in our framework.
• You independently create reports and communicate the results to various internal and/or external stakeholders (e.g., management, other departments).

Learn more about this business field at https://www.siemens-healthineers.com/de/products-services

Your qualifications and experience:

• You have a completed degree in the field of (Business) Informatics, Cybersecurity, IT Security, or a comparable discipline.
• You can demonstrate many years of professional experience in the field of Cybersecurity or IT, ideally with a focus on Compliance, Strategy, or Assessments.
• You have proven expertise in an area of Governance and possess very sound knowledge of a GRC platform (Governance, Risk & Compliance) that maps external laws and standards.
• You possess deep knowledge in the areas of Risk Management and Requirements Engineering, ideally in the field of Cybersecurity.
• You have experience working with different roles in international organizations to understand business requirements, explain requirements, and manage communication during conflicts.
• Additionally, you have comprehensive knowledge in integrating process changes and updates into Standard Operating Procedures (SOPs).
• Ideally, you bring knowledge of legal (cybersecurity) requirements or corresponding standards.
• Experience in project management is another plus.

Your profile and your skills:

• You work in an international team with colleagues from Europe, America, and Asia and therefore have fluent English skills. German skills are a plus.
• You bring passion for the Cybersecurity Governance Framework and are eager to actively help shape it.
• You work in a structured and independent manner and have already proven that you can prioritize complex processes. Furthermore, you are also able to work in a team.
• You ask the question "Why not?" instead of "Why?". With your innovative ideas, you question the status quo and drive its further development.
• We learn passionately: You have a great willingness to learn and are motivated to acquire new topics in the field of Cybersecurity as well as to adapt quickly to technological changes.
• Strong skills in the areas of problem-solving, analysis, communication, coordination, and task management round off your profile.

Our global team:

Siemens Healthineers is a leading global medical technology company. With more than 74,000 dedicated employees in over 70 countries, we shape the future of healthcare. Every day, approximately five million patients worldwide benefit from our innovative technologies and services in the fields of diagnostics and therapeutic imaging, laboratory diagnostics and molecular medicine, as well as our digital health and corporate services.

Our culture:

Our corporate culture values different perspectives, open discussions, and the will to challenge conventions. Constant change is part of our daily work. We want to drive changes in our industry instead of just reacting to them. That is why we invite you to take on new challenges, test your own ideas, and celebrate successes. Also visit our career page at https://www.siemens-healthineers.com/de/careers

We value diversity and equal opportunity and welcome applications from diverse backgrounds and especially from people with disabilities. #myabilityshs

If you would like to learn more and clarify initial questions personally – please contact us: recruitinggersupport.func@siemens-healthineers.com. The contact person for this job advertisement is Anna Steinebach.

We take the protection of your data and compliance with the GDPR and other data protection laws seriously. Therefore, we ask you not to send us your CV via email. Please create a profile in our Talent Community to upload your CV. This allows us to recognize that you are interested in career opportunities with us and enables us to notify you of relevant positions. Click here to create a profile.

To all recruitment agencies:

Recruitment at Siemens Healthineers is managed internally. External support is only permitted if a qualified agency has concluded a formal contract with us. Unsolicited applications and recommendations of candidate profiles without a current supplier agreement do not constitute consent and are therefore not subject to a fee. We do not delete or destroy unsolicited information and recommend refraining from such practices. We thank you for complying with our guidelines.

Siemens Healthineers Germany has been awarded the Great Place to Work® certificate.