Minimum 10 years of relevant experience in IT Security 

Minimum 5 years of experience in IT governance, risk, and compliance

Bachelor’s degree in Computer Science / Information Technology or equivalent experience

Industry-recognized security certification such as CRISC, CISSP, CISM or CISA – an advantage

Deep understanding of IT audit, compliance, risk management methodologies, business risk analysis and making complex business/risk trade-off recommendations and decisions

Strong Knowledge of regulatory standards such as SOX, PCI, Data Protection, etc

Knowledge in IT and security management frameworks such as COBIT, ITIL, NIST, ISO, and more

Experience in policy and security requirements development pertaining to IT security in large organizations

Experience with risk assessments and security requirements for vendors and third-parties

Security fundamentals with a solid understanding of security concepts, threats, vulnerabilities, risks, defenses, security principles and policies

Experience with standards development, implementation and compliance initiatives (e.g., ISO 27001/2, PCI, SOC)

Excellent interpersonal skills; comfortable communicating to all levels of leadership

Strong organizational skills

Strong verbal and written communication skills; ability to engage stakeholders to affect change

Strong self-motivation and orientation toward results

Excellent verbal and written communication skills including the ability to author and present materials ranging from detailed technical specifications to high-level presentations

Strong time and productivity management skills, ability to balance multiple tasks simultaneously

Ability to deal with ambiguity and make expert judgments in situations where no precedent exists

Strong conceptual and analytical thinking, problem solving skills

Strong project management skills with proven track record for delivering results

Ability to lead and work in teams

Excellent proficiency in English

Excellent proficiency in German and Spanish – an advantage