Contract type: full-time, unlimited
Entry: At the earliest possible date
Who we are?
We are Telefónica / o2 - with our mobile brands we connect millions of people and offer our customers mobile freedom in the digital world. As a leading telecommunications provider, we are also playing a key role in shaping digitisation in Germany. Our fixed and mobile networks form the backbone for the digital transformation of the economy and society. And our approximately 8,500 employees in Germany drive the transformation forward every day - in our own company as well.
Telefónica is one of the top employers in Germany and is part of the global telecommunications group Telefónica S.A. with 130,000 committed employees worldwide.
You too can become part of our unique team and let us make a difference together!
The Cyber Risk & Compliance Senior Specialist role will assist in the design, development, coordination, and execution of cyber risk and compliance practices that identify risks to the business and demonstrate compliance to external auditors and regulators. It will also support the creation and maintenance of security policies, standards and guidelines, in addition to cyber risk reporting to management.
What are your challenges with us?
Minimum 10 years of relevant experience in IT Security
Minimum 5 years of experience in IT governance, risk, and compliance
Bachelor’s degree in Computer Science / Information Technology or equivalent experience
Industry-recognized security certification such as CRISC, CISSP, CISM or CISA – an advantage
Deep understanding of IT audit, compliance, risk management methodologies, business risk analysis and making complex business/risk trade-off recommendations and decisions
Strong Knowledge of regulatory standards such as SOX, PCI, Data Protection, etc
Knowledge in IT and security management frameworks such as COBIT, ITIL, NIST, ISO, and more
Experience in policy and security requirements development pertaining to IT security in large organizations
Experience with risk assessments and security requirements for vendors and third-parties
Security fundamentals with a solid understanding of security concepts, threats, vulnerabilities, risks, defenses, security principles and policies
Experience with standards development, implementation and compliance initiatives (e.g., ISO 27001/2, PCI, SOC)
Excellent interpersonal skills; comfortable communicating to all levels of leadership
Strong organizational skills
Strong verbal and written communication skills; ability to engage stakeholders to affect change
Strong self-motivation and orientation toward results
Excellent verbal and written communication skills including the ability to author and present materials ranging from detailed technical specifications to high-level presentations
Strong time and productivity management skills, ability to balance multiple tasks simultaneously
Ability to deal with ambiguity and make expert judgments in situations where no precedent exists
Strong conceptual and analytical thinking, problem solving skills
Strong project management skills with proven track record for delivering results
Ability to lead and work in teams
Excellent proficiency in English
Excellent proficiency in German and Spanish – an advantage
Communication: A smartphone of your choice (incl. contract) and the possibility to provide your family and friends is a matter of course for us.
Team events: As a full member, you are always welcome at events.
Practical relevance: You will get a comprehensive insight into the daily work routine and can enrich us with your knowledge.
Workplace: Modern and ergonomically equipped offices, as well as an open space and open desk model.
Catering is provided: Free coffee and tea specialties and water are available at any time.
Development: Over and above your education, we offer you practical training
Exchange: We offer you a large Young-Talents-Community in which you can exchange ideas at any time.
Health: Under FEEL GOOD you will find a wide range of offers for your personal health and the compatibility of work and leisure. It ranges from exercise and relaxation programmes, webinars and cooperation projects to a comprehensive range of advice on child and elderly care and psychosocial counselling.
How to apply and what else you should know?
Convince us with your meaningful curriculum vitae as well as corresponding certificates. You do not need a letter of motivation with us. Please note that applications are only possible via our applicant portal and applications by e-mail cannot be considered.
Do you have questions about our application process and are you interested in further information about the position? Then please contact the responsible recruiter.
Recruiter: Christoph Heckner
In case of same qualification, applicants (m/f/d) with severe disability will be preferred. All gender are equally welcome.