About this role
As a Security Risk Manager, you will be part of a centralized information security governance team providing security risk management services across multiple Deutsche Telekom legal entities. The role focuses on operating and continuously improving the security risk management framework, while supporting and enabling local risk managers through consultation, training, and professional use of GRC tools. You will contribute to transparent risk reporting, effective risk mitigation, and harmonized governance practices in a complex, multinational environment.
Your Tasks
Operate and continuously improve the security risk management process, methodologies, and related policiesEnsure alignment with group-level security standards and governance requirementsSupport the integration of risk management into business and IT processesAct as a trusted advisor for supported legal entities on information security risk topicsTrain and upskill local risk managers on risk processes, methods, and policiesProvide hands-on guidance during risk identification, assessment, and treatmentSupport professional usage of the GRC platform by local risk managersAssist in risk creation, maintenance, and lifecycle management within the toolCollect user feedback and represent business needs toward process and tool improvementsIdentify, create, and manage security risks in cooperation with stakeholdersMonitor and support risk mitigation actions, including follow-up on progress and effectivenessEnsure risks are properly documented and audit-readyPrepare and maintain Top 10 risk reports, quarterly risk summaries, and ad-hoc reportsDefine, monitor, and analyze risk KPIs and metricsProvide management with insights on risk trends and improvement areas Bachelor’s or Master’s degree in Information Security, Computer Science, Engineering, Business Informatics, or a related fieldHigh-level English language knowledge (spoken and written)At least mid-level German language proficiency3–7+ years of experience in Information Security / Cybersecurity / Risk Management / GRC rolesExperience in large enterprise or multinational environmentsStrong understanding of information security risk management frameworks (e.g. ISO 27005, NIST RMF)Knowledge of information security standards (e.g. ISO 27001, NIST, CIS)Ability to apply security governance principles in practical, business-aligned waysStrong communication and stakeholder management skillsAbility to explain security and risk topics in business-friendly languageStructured, proactive, and solution-oriented mindset Experience in training, coaching, or enablement activitiesExperience working in a shared service or internal consulting model is an advantageCRISC, CISM, CISSPCOBIT, ITIL or similar governance-related certificationsHands-on experience with GRC tools (e.g. ServiceNow, Archer, OneTrust, or similar)*Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.
* Please be informed that our remote working possibility is only available within Hungary due to European taxation regulation.