← All roles
MeJuvante GmbH · IT Security
Senior Consultant Information Security & Cyber Resilience (m/f/d)
About the role
You lead the review, assessment and strategic development of information security and cyber resilience for critical financial infrastructures. You evaluate risks and governance alignment, plan and direct threat-led security testing, shape and execute cyber resilience strategies, and provide project management and operational governance for complex, multi-stakeholder initiatives. Sector: financial market infrastructure and payments. Engagement: long-term framework contract, with assignments called off per project. On-site in Frankfurt am Main per assignment, partial remote possible.
Key responsibilities
- Review and assess security policies, controls and change requests, including risk evaluation, governance alignment and impact assessment
- Plan, organise and conduct red team tests and threat-led penetration testing in financial infrastructure environments
- Advise on cyber and information security regulatory requirements and frameworks, for example data forensics, fraud detection and financial crime management
- Develop, plan and execute cyber resilience strategies
- Provide project management and operational governance for complex, multi-stakeholder projects
AI handles · You own
AI handles
Draft assessments, governance papers and steering reports · Regulatory mapping across frameworks · Risk and dependency registers · Test planning documentation and evidence packs
You own
The risk position you put your name to · Scope and rules of engagement for threat-led testing · Stakeholder alignment and escalation across organisations · The cyber resilience strategy and whether it holds under test
Your profile
- Risk evaluation and governance alignment
- Planning and direction of red team and threat-led penetration testing
- Cyber and information security regulatory requirements and frameworks
- Cyber resilience strategy development and execution
- Project management and operational governance in regulated, multi-stakeholder settings
Qualifications
- At least 6 years reviewing and assessing policies, controls and change requests from an information security and cyber resilience perspective
- At least 3 years planning, organising and conducting red team tests, ideally in financial infrastructure environments
- Experience with cyber and information security regulatory requirements and frameworks, for example data forensics, fraud detection or financial crime management
- At least 5 years developing, planning and executing cyber resilience strategies
- At least 5 years in project management and operational governance in complex, regulated environments
- Business-fluent English
- Willingness to undergo security screening for on-site work
- Desirable: experience with payment, securities settlement or collateral management systems, and knowledge of relevant technologies including Distributed Ledger Technology (DLT)
- Desirable: CISSP, CISA or an equivalent certification
- Desirable: Agile, PRINCE2 or PMP, and tools such as Jira or MS Project