Cyber Security Risk Specialist (m/f/d)

Empresa: BASF
Provincia: hibrido
Población: 
Descripción: At BASF Digital Hub Madrid we develop innovative digital solutions for BASF, create new exciting customer experiences and business growth, and drive efficiencies in processes, helping to strengthen BASF´s position as the digital leader in the chemical industry. We believe the right path is through creativity, trial and error and great people working and learning together. Become part of our team and develop the future with us - in a global team that embraces diversity and equal opportunities. We are seeking an experienced Cyber Security Risk Specialist to join our CISO organization. As part of the Cyber Security Risk Management team, you will contribute to the development, implementation, and maintenance of our cyber security risk management framework. RESPONSIBILITIES You will be a part of our Cyber Governance, Risk and Compliance (GRC) Product Family, which is the pilar of the second Line of Defense (2LoD) and manages the Cyber Security Framework for the whole BASF Group, following a risk-based approach. One major part of that is to develop and implement risk management tools, policies, and procedures in line with ISO 27001 and other relevant standards. Your core responsibilities will be: - Provide support to Asset Owners and Risk Owners to facilitate the operationalization of Cyber Risk Management-related processes across both IT and OT (Automation Technology) environments, - Foster collaboration with our global Risk Community, incl. OT stakeholders, by actively gathering their feedback, while effectively communicating updates and enhancements to ensure alignment and engagement. - Provide awareness materials and moderate training sessions on Cyber Security Risk Management with dedicated modules for OT environments to promote continuous learning and compliance towards BASF Business Units - Derive new processes or pilots to strengthen GRC in response to the evolving threat landscape in IT and OT (Automation Technology) - Conduct research on new threats by leveraging different sources such as Google Threat Intelligence or Dragos - Execute strategic risk assessments on-demand to identify and evaluate emerging risks in IT and OT, including risks to production continuity, safety, and environmental impact, that could negatively affect or harm BASF - Maintain and improve the toolset that our team provides (RSA Archer, Power BI, Knowledge Base within SharePoint) ensuring integration of OT-specific risk scenarios, asset classifications, and network segmentation (e.g., Purdue model layers) - Aggregate operational risks and translate asset-specific risks to generic risk scenarios on enterprise level to support senior management reporting and strategic as well as tactical decision-making - Support the lifecycle update of group-wide cyber security governance regulations based on generic BASF risk landscape - Work closely with cross-functional teams to support compliance of risk management processes with ISMS according to ISO 27001 and OT ...
Tecnologías: ISO 27001, SCADA, DCS, PLC
Tipo de Contrato: Indefinido
Salario: Sin especificar
Experiencia: 1 año
Funciones: Ciberseguridad
Descubre más: https://www.tecnoempleo.com/cyber-security-risk-specialist-m-f-d-basf/iso-27001-scada/rf-b9381f0612218353554c