Information Security Risk Manager (f/m/d)
As an Information Security Risk Manager at Awin, you will lead the global Information Security Risk Management function, ensuring the organization comprehends and mitigates its security risks effectively. This role involves embedding a culture of risk ownership across the company, proactively identifying vulnerabilities, and driving remediation efforts to completion. You will serve as a key advisor to senior leadership and the board, ensuring that risk appetite is clearly defined, integrated into decision-making processes, and consistently monitored.
Your primary responsibilities will include conducting enterprise-wide risk identification and assessment across strategic initiatives, technology, and third-party engagements. You will prioritize and articulate risks in business terms—such as financial, regulatory, and reputational impacts—to facilitate informed decision-making. Managing the Information Security Risk Register, you will ensure it accurately reflects the organization's risk exposure and the progress of mitigation efforts. Additionally, you will define and embed the company's risk appetite into business processes, establish key performance indicators to measure improvements in risk posture, and provide actionable risk insights to senior management and the board.
The ideal candidate will have a proven track record in delivering comprehensive risk management initiatives and driving remediation efforts across teams without direct authority. Experience presenting and defending risk positions to senior leadership and boards is essential. Hands-on experience within an ISO 27001-certified Information Security Management System (ISMS) environment is required, along with strong knowledge of frameworks such as ISO 27001. Proficiency in designing, implementing, or improving control frameworks and familiarity with Governance, Risk, and Compliance (GRC) platforms like Hyperproof are also important. Excellent communication skills in English are necessary to build relationships and influence senior stakeholders effectively.
Awin offers a flexible four-day workweek at full pay, with no reduction in annual holiday allowance, emphasizing work-life balance and mental well-being. Employees receive a monthly remote working allowance to support home office setups. The company provides access to additional pension insurance for employees in Germany. Awin fosters an international culture with flexible office arrangements and hybrid or remote work possibilities across its regions. Professional development is supported through the Awin Academy, offering a wide range of training programs. Employees can also express appreciation for colleagues through a voucher-based reward system.