It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS! 

You have a strong interest in cyber security and believe the following to be applicable to you?

A strategic-minded and highly experienced Cyber Strategy Consultant is sought to fortify our cybersecurity posture and guide our cyber strategy across various business verticals. The candidate should possess a wealth of expertise, with at least 5 years of intensive experience in cybersecurity and a portfolio of relevant certifications (e.g., CISSP, CISM, CRISC). This role demands a professional adept in developing robust security frameworks, designing actionable security plans, and evaluating the efficacy of security controls.

As a Senior Cyber Strategy & Architecture Consultant (m/w/d), you will assist our larger to smaller customers with the overall reinforcement of their security posture. Typical engagements include (but are not limited to):

• Develop, implement, and maintain comprehensive cybersecurity frameworks in accordance with industry best practices
• Design and execute strategic security action plans to address identified risks and compliance requirements
• Conduct thorough assessments of existing security controls, recommending and implementing enhancements as needed
• Define and establish cybersecurity maturity models to gauge the organization’s security posture and progress
• Manage third-party risk by implementing rigorous vendor assessment programs and continuous monitoring processes
• Formulate and maintain security metrics and reporting systems to track the effectiveness of the security program
• Lead information security risk management initiatives, identifying potential threats and devising tactical responses
• Define target operation models for security operations, ensuring they align with business objectives and operational requirements
• Ensure strict adherence to regulatory compliance standards across all business units, including GDPR, HIPAA, and SOC2
• Raise security awareness within the organization through the development and delivery of training programs
• Design and optimize security processes to enhance operational efficiency and response times.
• Spearhead the organization’s cybersecurity governance efforts, establishing policies and protocols for cybersecurity
• Utilize exceptional communication skills to articulate complex security concepts to stakeholders.
• Apply active listening skills to understand concerns and feedback from business units, translating them into actionable security measures
• Exhibit empathy when dealing with user security concerns, ensuring a user-centric approach to cybersecurity
• Engage in complex problem-solving, providing strategic solutions to intricate cybersecurity challenges

• Advanced knowledge and a minimum of 5+ years of experience in cybersecurity strategy and management
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC) are beneficial
• Proven track record of managing comprehensive security programs
• Demonstrated experience with regulatory compliance and industry standards
• Exceptional interpersonal skills, with the ability to communicate effectively at all levels of the organization
• Excellent English and German communication skills, both verbal and written
• You are eligible for a NATO clearance. (see HERE for more information)

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• A training budget of 10,000 EUR plus 10 days paid time off rolling over two years
• Working with and learning from the best people in the European cyber security “scene”. We have several SANS Instructors working for us and we are also represented at popular hacking conferences (BlackHat, BruCON, OWASP, etc.). In addition, our employees can take advantage of prestigious continuing education opportunities (GSE, GXPN, CISSP, OSCP, etc.)
• A forward-thinking and agile company that supports you in the creation and implementation of new initiatives
• Unique team events (most recently e.g. Lisbon, Dubai, Malta)
• A sophisticated coaching concept starting on day 1
• 30 days of vacation
• Flexible working hours and home office options (Working Abroad Option)
• Cost absorption for the local transport ticket and the BahnCard50
• Company bike leasing
• A cool office in the heart of Frankfurt / Munich (roof terrace with grill, foosball, Playstation 4)