Cyber Risk & Assurance Manager (m/w/d) - IT, Qualitätsmanagement

What you will be doing

Reporting to the General Manager, Cyber Governance, Risk & Assurance you will be responsible for managing important aspects of Cyber GRA as they pertain to the organisation.
You will work in the context of cyber security risk management and provide assurance that cyber security risks are identified, and remediating controls are implemented & effective.
Internally you will apply your knowledge in conducting and supporting risk assessments and assurance activities. You are comfortable in discussing risk with both technical & non-technical audiences. You are able to use corporate tools to record and monitor risks and outcomes of assurance activities.
Externally you may be requested to engage with customers & suppliers to manage risk and provide assurance to ensure a cyber safe ecosystem for Wärtsilä & its partners.
At times your role will involve matrix working to deliver specific projects in support of the wider cyber security strategy. We encourage individuals to be empowered at work and give opportunities to become subject experts in a particular area of their work.

As Cyber Risk & Assurance Manager, your work will focus on these responsibilities:

• Execute the implementation of a global cyber security risk framework for the organisation
• Support periodic risk assessments for all Business Units and Support Functions, as well as supporting the Corporate ISMS
• Conduct risk reviews on a periodic basis and provide quarterly risk reporting to stakeholders
• Prepare monthly, quarterly & annual risk reports for relevant stakeholders
• Provide input into quantifying the organisation's risk appetite and risk approach adherence accordingly
• Monitor and control assurance activities, including audit findings follow-ups, control maturity assessments, remediation plans.
• Record the outcomes of risk and assurance activities in the appropriate corporate systems
• Support assurance activities such as internal audits, 2nd line of defence audits and external audits
• In your role, you will also have a possibility to work as part of larger cyber security team delivering:
• Projects ensuring technical excellence and a practical/business driven approach
• Supporting the organisation with translating cyber risks into tangible actions and solutions
• My Cyber tickets such as assurance and contract reviews in a timely and professional manner

To be successful in this role, we expect you to have/be:

• Good reporting and documentation skills
• Strong analytical thinking
• Excellent communication & presentation skills in English (C1 CEFR minimum)
• Independent, self-driven

And hands-on experience in (at least two of the areas):

• ISO27001
• Risk assessments
• Control assessments
• Auditing
• ServiceNow Risk/Audit Management

Preferred Knowledge/Skills, Education, and Experience:

• Bachelor’s Degree in SW development, Computer Engineering/Science, Cyber Security or equivalent professional experience
• Cyber Security certification
• Knowledge of data reporting (e.g. PowerBI)
• Knowledge of applicable cyber security standards and regulations

Why you and us?

We at Wärtsilä believe in empowerment, ownership and taking responsibility of our work. We support each other’s growth and co-creation is the true basis of our innovation. We have courage to see opportunities and take initiative.

We are authentic and honest, and we strongly believe in that by being your own true self you can accomplish so much more. We don’t always get it right the first time, and if mistakes are made, we make sure to learn and grow from them. We want everyone to voice their opinions freely. That is why we have built an environment that empowers you and everyone around you, and where you can feel safe and cared for. Are you eager to be part of this ambition?

We have an amazing team and we are excited about our work and the impact it has on building sustainable societies. We are looking to find a colleague with this shared passion for smart technologies and a sustainable future.