Security Risk Manager

Responsibilities

• ▹Operate and continuously improve the security risk management process, methodologies and related policies
• ▹Ensure alignment with group-level security standards and governance requirements
• ▹Support the integration of risk management into business and IT processes
• ▹Act as a trusted advisor for supported legal entities on information security risk topics
• ▹Train and upskill local risk managers on risk processes, methods and policies
• ▹Provide hands-on guidance during risk identification, assessment and treatment
• ▹Support professional usage of the GRC platform by local risk managers
• ▹Assist in risk creation, maintenance and lifecycle management within the tool
• ▹Collect user feedback and represent business needs toward process and tool improvements
• ▹Identify, create and manage security risks in cooperation with stakeholders
• ▹Monitor and support risk mitigation actions, including follow-up on progress and effectiveness
• ▹Ensure risks are properly documented and audit-ready
• ▹Prepare and maintain Top 10 risk reports, quarterly risk summaries and ad-hoc reports
• ▹Define, monitor and analyze risk KPIs and metrics
• ▹Provide management with insights on risk trends and improvement areas

Requirements

• ▹Bachelor's or Master's degree in Information Security, Computer Science, Engineering, Business Informatics or related field
• ▹High-level English language knowledge (spoken and written)
• ▹At least mid-level German language proficiency
• ▹3-7+ years of experience in Information Security / Cybersecurity / Risk Management / GRC roles
• ▹Experience in large enterprise or multinational environments
• ▹Strong understanding of information security risk management frameworks (e.g. ISO 27005, NIST RMF)
• ▹Knowledge of information security standards (e.g. ISO 27001, NIST, CIS)
• ▹Ability to apply security governance principles in practical, business-aligned ways

Nice to have

• ▹Experience in training, coaching or enablement activities
• ▹Experience working in a shared service or internal consulting model
• ▹CRISC, CISM, CISSP
• ▹COBIT, ITIL or similar governance-related certifications
• ▹Hands-on experience with GRC tools (e.g. ServiceNow, Archer, OneTrust)

Soft skills

What we offer

• ▹Remote work possibility within Hungary

About the company

Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group, providing a wide portfolio of IT and telecommunications services with more than 5,300 employees. It serves large corporate clients in Germany and other European countries and is hiring IT professionals across its four Hungarian sites (Budapest, Debrecen, Pécs, Szeged). According to Randstad's 2025 representative survey, it is Hungary's most attractive employer.