In this senior role, you will steer and take ownership of our group-wide Enterprise Risk Management and Internal Control System (ICS) within a dynamic, international environment. Acting as a trusted strategic advisor to senior management, you will play a key role in safeguarding corporate decisions, enhancing risk governance, and driving the digital transformation of our internal controls.

Tasks

• Drive the continuous strategic development and enhancement of our risk and ICS methodologies, translating complex regulatory requirements into practical, efficient business processes.
• Lead process and control design by analyzing, mapping, and modeling core processes, as well as implementing and monitoring robust control frameworks.
• Oversee risk and ICS governance, preparing comprehensive risk reporting for the Executive Board and Supervisory Board, including quarterly updates, ad-hoc reports, and the annual risk and opportunity report.
• Identify, evaluate, and monitor operational and strategic risks, validating reported risks, identifying interdependencies, and designing effective mitigation measures.
• Facilitate and lead Risk Committees, risk assessments, and ICS workshops with executive leadership and international business units.
• Maintain and update governance guidelines, manuals, and templates in alignment with national and international standards.
• Act as a primary contact and trusted advisor for internal business divisions, senior leadership, and external auditors on all risk and ICS matters.
• Steer the functional enhancement, administration, and continuous rollout of our dedicated Risk & ICS management software tools.
• Provide functional leadership and mentoring to junior team members, working students, and interns.

Qualifications

• University degree in Business Administration, Economics, Information Systems, Business Law, or a comparable field of study.
• At least 5 years of solid, relevant professional experience in Enterprise Risk Management, ICS, auditing, or consulting within complex organizations, ideally in a publicly listed corporate environment.
• Sound working knowledge of established risk and control frameworks (such as COSO, COSO ERM, ISO 31000, IDW PS 340, IDW PS 981).
• Proven experience in end-to-end business process modeling, process analysis, and the implementation of effective internal control frameworks.
• Deep understanding of business and governance processes in listed companies, combined with a strong affinity for IT risk management.
• Strong analytical mindset, problem-solving skills, and confident communication when presenting to executive stakeholders.
• High degree of initiative, autonomy, and the ability to maintain clarity and structure in dynamic situations.
• Fluent business English and German language skills, both written and spoken, are required; additional languages are an advantage.
• Relevant professional certifications (e.g., in Risk Management, ICS, Information Security, or Compliance) are considered an asset.

Benefits

• Hybrid working model.
• Flexible working hours through trust-based working hours.
• At some locations a subsidized canteen and various free drinks.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter parties, as well as workshops.
• Numerous training and development opportunities.
• Various health offers, such as sports and health courses.