Lead end-to-end information security risk management for a global SaaS provider, including quantitative risk analysis, third-party supplier security assessments, and C-Level reporting. Develop risk methodology, train stakeholders, and ensure compliance with ISO 27001 and SOC 2 standards. Requires expertise in SaaS/cloud security, risk quantification (e.g., FAIR), and cross-functional collaboration.
Key Highlights
End-to-end ownership of information security risk management across global entities
Quantitative risk analysis using scenario-based methodologies (e.g., FAIR) and stakeholder workshops
Third-party risk management including supplier assessments, contracts, and lifecycle evaluations
Support for internal controls, audits (ISO 27001/SOC 2), and C-Level reporting
Development of risk culture and training for business/technical stakeholders
Key Responsibilities
Conduct end-to-end information security risk management, from initial concern triage to quarterly C-Level reporting using a proprietary quantitative risk methodology
Lead risk scenario estimation workshops with cross-functional teams (Engineering, Legal, Data Protection, Sales, Customer Success) to assess frequencies, losses, and confidence levels
Evaluate and integrate third-party supplier risks across the entire lifecycle, including questionnaires, SOC 2 reports, ISO certifications, and annual reassessments
Support internal control frameworks and audits (ISO 27001, SOC 2 Type 2) while responding to customer due diligence and RFP requests on risk and supply chain security
Develop and refine the risk methodology, train business/technical stakeholders, and foster a proactive risk-reporting culture
Assess treatment efficiency, prepare risk acceptance decisions, and consolidate the risk portfolio quarterly for executive reporting
Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.
Benefits & Perks
Flexible work location and hours (fully remote or hybrid)
35 vacation days per year
Subsidized health insurance (pension plan)
Global team with international collaboration
Wellness benefits (massages, gym subsidies, Deutschlandticket)
Training and development opportunities
30 days work-from-abroad program
Sustainability initiatives and social commitment
Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.
Nice to Have
CRISC, CISM, CISSP, ISO 27005 Risk Manager, or Open FAIR certification
Experience with GRC tooling (e.g., Jira, Confluence)
Proficiency in Microsoft Azure cloud architecture
German language fluency
