Governance, Risk, and Compliance (GRC) Specialist in Hamburg bei Olympus Europa SE & Co KG (OEKG)

Your responsibilities

• Responsible for helping with the day-to-day IT compliance, data governance, and IT risk management functions under the direction of the GRC Manager.
• Responsible for the regional development and implementation of the system-wide risk management function of the information security program to ensure information security risks are identified and monitored.
• Liaise with Olympus GRC Manager and MSPs to help with risk assessments (NIST, ISMS, JSox, ITAR, Security Audits, etc.) providing evidence, artifacts, screenshots to IT controls and helping with business stakeholder meetings and briefings.
• Maintain the GRC tool with updated IT risk register, controls, gaps, risks, remediation and reporting.
• Coordinate and track all information technology and security related audits including scope of audits, units involved, timelines, auditing agencies and outcomes. Provide guidance, evaluation and advocacy on audit responses.
• Assist MSP team to work with various regional operational and business teams to drive toward a cohesive view of security risk and drive open remediation items to closure.
• Internally assess, evaluate, and make recommendations to the GRC Manager regarding the adequacy of the security controls.
• Must be able to assess the status of complex multi-location projects as well as identify and implement appropriate corrective measures to resolve issues as they arise.
• Maintain the Security Education Program and develop training material in accordance with regional policies and regulations.
• Drive the regional system-wide information security compliance program, ensuring IT activities, processes, and procedures meet defined requirements, policies and regulations.

Your qualification

• Bachelor’s degree in (business) informatics, technical academic education, comparable qualification or relevant work experience.
• Should hold at least one of the security certification (ex: CompTIA Security, CISSP, CISA, CRISC, etc.).
• Minimum 5 years of relevant work experience.
• Deep understanding of information security topics (Confidentiality, Integrity, Availability).
• Knowledge about ISO 27001/27002, NIST, COBIT, BCM, SOX and IT Risk Management.
• Good communication skills combined with a well developed analytical and conceptual thinking.
• Fluent in English (verbal/written).

Your benefits

• Flexible working hours, remote work possible (up to 60%)
• 30 days of holidays per year
• Modern office and an inspiring working environment
• Employee restaurant with live cooking and healthy food (subsidized)
• Public transport ticket (100 % subsidized) or free parking space
• Company sport groups and an inhouse company gym
• Employee Assistance Program to support your health, mental and emotional well-being
• A comprehensive company pension scheme
• Company medical officer and vaccination offers
• Childcare through our ‘Buttje&Deern’ partner
• Bike leasing