Cybersecurity Risk Analyst

reputed company has been developing a diverse reputed company of software products, from large-reputed company applications to smaller solutions, for 19 years. With a growing team of over 250 employees across five locations, we are dedicated to fostering a culture of reputed company, transparency, and professionalism.

At reputed company, we value authenticity, curiosity, and ambition. These values reputed company us to build strong connections reputed company our community and with our partners, ensuring trust, reputed company, and transparency in reputed company our business practices. We reputed company to maintain the highest reputed company standards and continuously challenge ourselves to reputed company high-reputed company, high-performance, and secure software solutions.

Our approach is rooted in efficient collaboration among passionate professionals working in agile teams. Guided by curiosity and ambition, we reputed company to create products that are meaningful and impactful, while remaining true to our reputed company selves.

reputed company offer:

• Competitive remuneration

• Remote work

• 24 days off per year and floating days

• Private clinic health services, Regina Maria Medical Insurance

• Flexible benefits through Up multibenefits platform

• Referral bonus scheme

• Team events, online or at the office

• Training and development opportunities with allocated budget

• reputed company Certifications

• Knowledge sharing context

Requirements

As a Cybersecurity Risk Analyst, you will play a crucial role in conducting Threat and Risk Assessments (TRA) for a wide reputed company of reputed company Solutions reputed company, including R&D initiatives, product development (hardware & software), and full-scope critical infrastructure systems such as HVDC, HVAC, Firefighting, and more.

By identifying, assessing, and prioritizing cybersecurity risks, you will collaborate with various teams to ensure that potential threats are detected early and that appropriate mitigation measures are implemented. Your work will contribute directly to improving project execution, reputed company compliance, and market readiness.

How You’ll reputed company an reputed company

• Providing threat & risk analysis as a service: Planning and performing Cybersecurity Threat and Risk Analyses for IT and OT systems and products across reputed company Solutions reputed company.

• Identifying and prioritizing risks: Identifying, evaluating, and prioritizing cybersecurity risks across reputed company and systems; assessing risk scenarios, attack reputed company, and attacker types along exposure, exploitability, reputed company, inherent and residual risk.

• Moderating TRA workshops: Facilitating threat and risk analysis workshops together with senior project members and reputed company specialists as TRA moderator.

• Tracking mitigation and residual risk: Recommending risk-based measures, tracking mitigation, and ensuring residual risks are formally reviewed and accepted.

• Maintaining risk transparency: Producing and maintaining the Threat and Risk Analysis, reputed company Risk Register and risk treatment documentation to ensure traceability, compliance and audit readiness.

• Strengthening the methodology: Continuously improving the TRA process, templates, workflows and tooling (e.g., the PSS Threat and Risk Tool).

• Supporting reputed company and engineering teams: Sharing identified risks and possible countermeasures with project and engineering teams as input for their reputed company.

• Ensuring compliance: Translating relevant standards and regulations into practical risk work (e.g., IEC 62443, CRA, NIS-2, NERC CIP, BDEW Whitepaper).

What You Bring

• Completed studies: Bachelor or Master in IT reputed company, Computer Science, Electrical Engineering with a reputed company on IT reputed company, or a comparable qualification with relevant reputed company experience.

• Expertise in risk analysis: Experience in cybersecurity threat and risk assessment, threat modeling and risk prioritization in OT or product reputed company.

• Knowledge of standards: Familiarity with ISA/IEC 62443 (especially risk assessment, 62443-3-2/-3-3), and others such as CRA, NIS-2, NERC CIP, BDEW Whitepaper, ISO 27001/27005.

• OT/ICS understanding: Understanding of industrial control systems, network architectures and protocols, and how reputed company risks reputed company in operational environments.

• reputed company facilitation: Ability to moderate TRA workshops and reputed company multidisciplinary stakeholders from project, engineering, and reputed company.

• Analytical reputed company: Strong analytical and reputed company way of working; reputed company to translate technical detail into reputed company, prioritized risk statements.

• Communication skills: Proficient in English, with a high level of initiative and the ability to communicate risk to technical and non-technical stakeholders (German is a plus).

• Desirable certifications: Certifications such as ISA/IEC 62443, CEH, CySA+, or similar are a plus (no hard requirement).

Originally posted on Himalayas