Cybersecurity Professional (f/m/d) - Third Party Cybersecurity Risk Management

Then come and join our global team as Cybersecurity Professional (f/m/d) - Third Party Cybersecurity Risk Management to be responsible for defining and implementing cybersecurity third-party (supplier) assessment and risk management at Siemens Healthineers.

Choose the best place for your work – Within the scope of this position, it is possible, in consultation with your manager, to work mobile (within Germany) up to an average volume of 60% of the respective working hours.

This position is suitable for job sharing in addition to full-time. We welcome applications from tandems. If interested, we request that both tandem partners apply together.

Your tasks and responsibilities:

• You perform independent analysis of external requirements from laws and standards (e.g. ISO27001, NIS2) and coordinate with our business partners (Legal, Procurement, IT and Quality) to develop the necessary process improvements to meet new requirements and roll out the process changes to the different businesses
• You are responsible for the assessment, selection or development of process tools (e.g. PowerApps), as well as the creation of the necessary process documentation and training documents, for the third-party risk assessment and management process
• You develop methods and tools for quantifying process efficiency (key performance indicators) and ensure appropriate monitoring and reporting
• You are responsible for the necessary assurance in the third-party risk assessment and management process by defining and carrying out the required quality checks
• You perform assessments and assurance tasks as required and support the business units in their implementation and execution of processes and assessments
• You stay up-to-date on the legal and regulatory developments regarding third-party risk management

To find out more about the specific business, have a look at https://www.siemens-healthineers.com/products-services

Your qualifications and experience:

• You have a university degree in computer science, (industrial) engineering, law, IT or comparable
• You have many years of professional experience in at least one of the following subject areas: procurement, cybersecurity, IT, law, or quality
• You already have very sound, long-standing professional experience and further qualifications in this field, but no university degree? Then we are equally pleased to receive your application
• You have very profound experiences in cross-functional tasks and a strong expertise in strategic analysis of external requirements and definition of related internal global processes
• A pronounced affinity for attention to detail, working with laws and standards/risk management and the ability to deal with ambivalent situations are an advantage
• You have at least basic knowledge of network infrastructure, authentication requirements and encryption
• Experience in communication (both written and verbal) with customers or suppliers is an advantage

Your attributes and skills:

• To operate successfully in our global network of colleagues and suppliers, you have very good oral and written English and German skills
• You convince with your strong analytical skills and you are proficient in communication across various disciplines
• You have very sound decision-making and organizational skills to coordinate the global community