IT Security Consultant

What we offer

Explore a world of opportunities with us. Look ahead with us and help shape innovative solutions to make our world more sustainable and life healthier, more vibrant and more comfortable. At Evonik, you have the chance to explore, thrive, and grow alongside 33,000 colleagues.

Among attractive career paths and high-quality development programs, we not only offer performance-based remuneration and occupational health benefits but also hybrid and flexible working environments with #SmartWork.

Find out more about the many benefits we offer:

https://careers.evonik.com/en/why

Bring your fresh perspective, develop your strengths, break out your mold, and find a career that fits your dreams with us.

Click on the link below to learn what our employees have to say about Evonik:
https://careers.evonik.com/en/about/meet-the-team/

Responsibilities

• Consulting on current trends in the methodological and technical assessment of IT security requirements, including security, governance, and risk considerations for Artificial Intelligence (AI) and Machine Learning (ML) solutions.
• Regular analysis of the threat landscape in the IT security environment and review of regulatory requirements and methodologies with regard to information security and emerging AI governance frameworks (e.g., ISO/IEC 42001, NIST AI RMF, AI-related regulations).
• Responsibility for continuous monitoring of the IT security level, assessment of threat potentials and residual risks, including AI-related risks, and development of corresponding recommendations for action.
• Responsibility for the introduction, implementation, and continuous development of a methodology to ensure IT security requirements and AI governance requirements.
• Participation in the development of new solutions in the IT security environment and conducting security assessments for new or existing security solutions, including AI and data-driven solutions.
• Consulting and support for IT product groups and other Evonik units on information security matters, AI governance matters, as well as guidance and consulting for IT projects and AI-related initiatives in this context.
• Responsibility for regular knowledge exchange with stakeholders such as Product Owners, Domain Architects, IP Protection, and OT Security, as well as Product Managers, Data Scientists, Legal, Compliance, and Risk Management teams.
• Support of M&A projects during the due diligence phase to assess the security level of the seller's IT environment and AI-related risks, and development of measures for temporary protection until integration into the Evonik standard.
• Guidance and consulting for IT M&A projects until the completion of the transition regarding information security and AI governance.
• Contribution to the creation and updating of IT group standards and AI governance standards, and active participation in IT committees.
• Lead AI risk assessments and coordinate the implementation of AI governance requirements for AI use cases, ensuring compliance with internal policies, regulatory requirements, and recognized AI governance frameworks.
• Partner with Product Managers, Data Scientists, Security, Legal, Compliance, and Risk Management teams to evaluate AI-related risks, define required controls, support risk treatment decisions, and oversee the continuous monitoring of AI systems throughout their lifecycle.

• Successfully completed (technical) university degree in IT security, computer science, economics, engineering, or natural sciences, or a comparable commercial/technical education in the IT field with relevant professional experience.
• Experience in the field of information security and proven experience with concepts, protocols, strategies, and best practices in information security and technology risk management.
• Experience in conducting risk analyses including consideration of business impact, assessment of vulnerabilities, effectiveness of measures, and development of strategies for effective risk reduction, including emerging technology and AI-related risks.
• Strong understanding of the impact of IT security tools/technologies and regulations on business processes, and familiarity with common information security management frameworks such as (ISO) 2700x or the NIST Cyber Security Framework, as well as AI governance frameworks such as ISO/IEC 42001 and the NIST AI Risk Management Framework.
• Certification in IT security such as CISM, CRISC, ISO 27001 Lead Auditor, or CISSP, with AI governance certifications considered an advantage.
• Fluent English skills, both written and spoken; German language skills are considered a strong advantage.
• Ability and willingness to interact with Evonik personnel and build a network, as well as a high level of initiative, assertiveness, cooperation skills, and team spirit.
• Willingness to travel occasionally (nationally and internationally).

Your Application
 

To ensure that your application is proceeded as quickly as possible and to protect the environment, please apply online via our careers portal. Further information about Evonik as Employer can be found at www.evonik.com/en/careers.html. 

Please address your application to the Talent Acquisition Manager, stating your earliest possible starting date and your salary expectations.

Your Talent Acquisition Manager:

Company is