Digital Risk Management Professional

About DNV Germany Holding GmbH

We are a leading provider of shared services within Human Resources, Finance, IT, and Real Estate & Procurement globally. Our internal support organization delivers various services, enabling DNV to grow, succeed with its business goals, and improve competitiveness.

The IT Security Management unit is one of two security units in our organization, focusing on Governance, Risk, and Compliance (GRC). Our services include information security risk management, vendor security assessments, application security assessments, security architecture, and security advisory. We collaborate closely with DNV Business Areas and Group functions.

Job Role:

• IT Security Project Manager responsible for managing selected projects, focusing on Business Continuity, IT Security governance improvement, Information Protection and Data Loss Prevention, General security improvement projects, and Third-party security risk management.
• Contributing to cybersecurity matters in DNV mergers & acquisition processes, including participation in Due Diligence and Integration projects.
• Driving the GSS IT part of the DNV Group Cyber Security Insurance renewal process.
• Potential lead role in the Security Emergency Response process (CSERT), and participation in cyber security investigations.
• Conducting gap assessments and audits towards relevant security policies.
• Facilitating and conducting security risk assessments.
• Supporting DNV Business Areas in navigating the complex landscape of cyber threats and risks.
• Collaborating with Group and Business Areas on information security, including involvement in relevant projects.

What We Offer:

• Competitive benefits package, including 6 weeks annual vacation, subsidized canteen, competitive pension, insurance, and parental leave agreement, in addition to a global profit share scheme.
• Flexible working hours and workplace, prioritizing work/life balance for our employees.
• International culture that values teamwork and inclusion across business areas and borders.
• Opportunities for professional and personal development, including extensive possibilities to grow and develop your competencies and career ambitions.
• Access to sailboats, kayaks, tennis courts, and more than 30 activity groups for you to join, as well as gym facilities and a kindergarten located on our premises.

Required Skills and Qualifications:

• University degree in technological sciences (preferably computer science).
• At least 5 years of experience within IT and information security.
• Good understanding of security architecture and current cyber threat landscape.
• Experience from implementation of ISMS and ISO 27001 certification processes.
• Experience from IT security process work and continuous improvement planning.
• Proven skills and relevant experience in IT security project management.
• Experience with information security risk management.
• Good knowledge of Microsoft's product portfolio, with emphasis on the security stack.
• Effective engagement skills for both senior management and IT professionals.
• Excellent communication and interpersonal skills.
• Excellent attention to detail as well as spoken and written communication; demonstrating strong presentation skills.
• Fluent proficiency in English – written and oral; working language is English.
• Outstanding analytical and problem-solving abilities.
• Excellent Organization, Planning, and Time Management skills.
• Experience with security standards such as ISO 2700x, NIST, SANS, CSA CCM, GDPR, and DORA.

Preferred Qualifications:

• Project Management Certification (PMI PMP, PMI ACP, or PRINCE2 Practitioner).

Desired Personality Traits:

• Adaptable, proactive, self-driven, and service-oriented individual with analytical mindset and problem-solving approach.
• Ability to work independently and drive projects to successful completion.
• High integrity.