C

Capgemini

Global consulting, technology services, outsourcing

Cybersecurity Audit & Risk Advisor - Public Sector

Security Governance, Risk & CompliancePosted on Nov 12
Full-timeNo salary listed

About the Job

Requirements

  • A completed degree in computer science, business informatics, or a comparable qualification with a focus on Governance, Risk & Compliance, or an equivalent qualification.
  • Strong knowledge of information security management systems, threat modeling, structural analysis, and the Basic Protection Check.
  • A current BSI IT-Grundschutz certification is required; comparable practical experience is also considered.
  • Three to five years of experience in Governance, Risk & Compliance, including knowledge of assessing cloud security measures at cloud service providers and developing security concepts in a business continuity management context.
  • A deep understanding of public-sector IT security requirements, current threat situations, and relevant regulatory and legal requirements, including NIS2, BSIG, IT-SIG, KRITIS-DachG, CRA, GDPR, and the AI Act.
  • Strong interpersonal skills, resilience, analytical abilities, and a persuasive manner, with a solution-oriented approach.
  • Very good German and English language skills.
  • Willingness to travel throughout Germany.

Responsibilities

  • Develop and implement IT security governance frameworks and create security concepts according to BSI Standard 200-2.
  • Identify, assess, and document IT security risks, and conduct security audits, gap analyses, and Basic Protection-oriented assessments.
  • Advise on compliance with regulatory and compliance requirements and support public authorities in implementing them.
  • Assess cloud security measures of established cloud service providers and develop security concepts in the context of business continuity management.
  • Design and deliver workshops, training, and awareness initiatives on IT security, best practices, and current threat situations.

Desired Qualifications

  • Additional certifications such as CISA, CISM, CISSP, or TISP are advantageous.

About the Company

Capgemini

Global consulting, technology services, outsourcing

Capgemini provides consulting, technology services, and outsourcing to help organizations transform digitally. Its offerings include strategy and transformation consulting, system integration, application development, IT infrastructure management, and managed IT operations. It differentiates itself with a global presence in over 50 countries and a focus on applying AI, cloud, and cybersecurity to real business problems. Its goal is to help clients navigate digital transformation and improve efficiency and innovation through tailored, contract-based or managed services.

Company size
10,001+
Company stage
IPO
Headquarters
Paris, France
Founded
1967

Recently Posted Jobs

Explore more opportunities at Capgemini

See more jobs