Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
CBTW

Governance, Risk & Compliance Expert

CBTW

. Support our clients in defining and implementing their information security strategies .

Posted 11/10/2026full-timeBerlin • GermanyMid-LevelSenior💰 €65,000 - €75,000 per yearWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in implementing and improving Information Security Management Systems (ISMS) while ensuring compliance with cybersecurity regulations such as NIS2, DORA, and GDPR. Proficient in risk management methodologies and capable of conducting audits and training initiatives to enhance organizational security posture.

Highest-signal resume keywords
Information Security Management Systems (ISMS)ISO 27001 Lead Implementer / Lead AuditorRisk Management MethodologiesGovernance, Risk & Compliance (GRC)Fluent in German and English

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
ISO 27001ISO 27002ISO 27005EBIOS RMSecurity Risk AnalysisSecurity Policy DevelopmentSecurity Incident ResponseSecurity Awareness TrainingSecurity KPI DefinitionInternal Audits
Soft Skills
Analytical SkillsStructured Approach to Work
Certifications & Qualifications
CISMCISSPCRISCCISA
Industry Keywords
CybersecurityData Protection RegulationsComplianceSecurity StandardsSecurity Best Practices

Tech Stack

Tools & technologies
Cyber Security

About the role

Key responsibilities & impact
  • Support our clients in defining and implementing their information security strategies
  • Organize, structure, and manage security projects
  • Implement and continuously improve Information Security Management Systems (ISMS)
  • Develop and continuously improve security policies and processes
  • Analyze and assess security risks using established frameworks such as ISO 27005 and EBIOS RM
  • Identify and monitor operational, compliance, and security risks
  • Define and implement security KPIs
  • Support compliance with relevant cybersecurity and data protection regulations, including NIS2, DORA, GDPR, and NIST
  • Analyze organizations’ security posture and identify improvement measures
  • Conduct internal audits and support compliance processes
  • Coordinate responses to security incidents and support their analysis
  • Monitor and ensure the implementation of action plans following incidents or audits
  • Develop measures to improve the security posture
  • Conduct training and security awareness initiatives
  • Promote the adoption of security standards and best practices
  • Exchange knowledge and share best practices within the internal security community

Requirements

What you’ll need
  • Bachelor’s or master’s degree in cybersecurity, information security, or a comparable qualification
  • At least 5 years of experience in a comparable role in Governance, Risk & Compliance or information security
  • In-depth knowledge of the ISO 2700X standards (ISO 27001, ISO 27002, ISO 27005)
  • Experience with risk management methodologies such as EBIOS RM
  • Knowledge of relevant regulatory requirements such as NIS2, DORA, and GDPR
  • Experience implementing or continuously improving an ISMS
  • Excellent analytical skills and a structured approach to work
  • Fluent in German and English
  • Willingness to travel within the DACH region
  • Certifications such as ISO 27001 Lead Implementer / Lead Auditor or ISO 27005 Risk Manager are an advantage
  • Additional certifications such as CISM, CISSP, CRISC, or CISA are a plus

Benefits

Comp & perks
  • Permanent employment contract
  • Welcome Day, Hello Drink & Newbie Lunch
  • Mentoring program
  • After-work events, Summer Tech Event & festive Christmas party
  • Joint social engagement through fundraising campaigns
  • Individual career paths & regular feedback discussions
  • A wide range of in-house training, online courses & external professional development
  • International collaboration with colleagues from across Europe
  • Remote work & workation – within the EU and beyond
  • Sabbatical opportunities & flexible working-time models
  • Baden-Württemberg public holiday calendar plus the public holidays in your federal state – double the benefit
  • 30 days of annual leave
  • Allowance for equipping your mobile workspace
  • Deutschlandticket or bicycle leasing
  • Optional: BahnCard
  • Support with retirement planning & wealth building
  • A wide range of options for financial protection
  • Access to the Employee Assistance Program (EAP) – also for family members
  • Bonuses for exceptional commitment
  • Exclusive benefits through our Corporate Benefits platform
  • CBTW Spotify playlist