Cyber Security Specialist - GRC
- Lilium
- Hybrid (Gauting, Germany)
- 31/08/2024
Job Description
A career at Lilium is for those who want to do something extraordinary. We take pride in pushing the boundaries of engineering, technology and customer experience.
As part of a team, you will tackle challenges and deliver something that has never been done before. By joining Lilium you will have the opportunity to work with a world-class entrepreneurial team of more than 950 people who are as passionate about changing the world as you are.
You will always act with safety and in mind and embody our core behaviors of efficient and positive collaboration, ownership of time, continuous improvements and, ultimately delivering results.
We thrive on diversity and creating an inclusive culture, with more than 50 nationalities currently working hard to bring our vision of a sustainable world to life.
Your role and your team:
You would be one of the early joiners in the growing Cyber Security function at Lilium. You will have the opportunity to shape overall Security Governance Risk and Compliance landscape for both IT and OT sides of our business.
You will be a part of the Cyber Security team and report to the Cyber Security Team Lead - GRC.
Your Day-to-Day Tasks:
- Establish and maintain a robust cyber security risk framework and ensure proper alignment to relevant industry frameworks (eg ISO, NIST, NIS2 etc.)
- Regularly assess internally identified risks as well as identifying risks associated with third parties
- Increase awareness for the accountability and ownership of cyber security risks
- Provide precise guidance and feedback on the implementation of risk mitigations and action plans
- Developing an overall cyber security threat landscape covering all aspects of our business
- Lead cross-functional risk management initiatives and projects that impact multiple risk disciplines and/or business units
- Create and establish regular risk reports to the management
Your Profile:
- Ability to translate requirements into business language and priorities, and continuously work with them to develop business and security risk-appropriate control implementation solutions while balancing business priorities with compliance needs
- Ability to work efficiently and independently in a fast-paced, innovative environment
- Experience in conducting internal and external risk assessments
- Ability to work closely with auditors, regulators, and internal stakeholders and articulate technical concepts
- Experience working with security-related regulatory requirements, such as NIST, PCI, CSA, SOX and ISO 27001
- Work experience in an international environment of at least 5 years
- Strong communication and interpersonal skills
- Fluent English language skills (written and spoken) and German would be good to have
This position is a mandatory presence in Germany with 1 day flexibility to work from home.
Want to know more? Then view our 'Why join Lilium' page!
Life at Lilium:
The well-being of our employees is a high priority. In our HQ we have many initiatives such as free healthy food and drinks, free in-house gym and health days. In remote offices we offer online opportunities to stay connected and develop yourself as well including our culture club, learning terminal, Employee Assistance Program and many more.
Lilium is an equal opportunity employer and welcomes applications from all qualified individuals regardless of ethnicity, sex, disability, religion/belief, sexual orientation or age.
Co-founded in 2015 by Daniel Wiegand, Sebastian Born, Patrick Nathen and Matthias Meiner, Lilium GmbH is based near Munich, Germany - an internationally renowned high-tech hub for mobility. The founding team met while studying at the Technical University of Munich where they shared a common vision of revolutionizing the way we travel. Today, Lilium has attracted more than $100m in funding and employs more than 300 people, bringing together a wealth of experience and expertise from across the world.