MAIN RESPONSIBILITIES
Act as the primary point of contact for Information Security topics and coordinate the implementation of Cyber Resilience Act requirements, including awareness activities across the organization.
Serve as the Local Information Security Officer (LISO) and ensure compliance with TISAX requirements, including implementation, maintenance, and employee awareness. Lead the development, implementation, and continuous improvement of the Business Continuity Management System (BCMS) in line with MHG requirements.
Coordinate and support the implementation of the Risk Management System. Act as the main contact person for Data Protection (GDPR) topics and support relevant departments such as HR, HSE, Purchasing, and others.
Coordinate activities related to crisis management and support compliance with NIS2 requirements, including reporting and communication with stakeholders.
Coordinate general compliance audits and align audit activities with MHCZ auditors and corporate audit programs (excluding customer audits). Prepare, coordinate, and evaluate internal and external audits and support affected teams in implementing corrective actions.
Drive employee awareness and training activities in the areas of resilience, compliance, information security, business continuity, and data protection. Coordinate resilience management activities in cooperation with senior management and the GBTS Compliance Manager.
Manage and maintain relevant systems and platforms (e.g., Alyne and other compliance/risk management tools). Ensure regular reporting to the MHG Resilience organization and maintain a functional reporting line to the Head of Resilience. Cooperate closely with the GBTS Compliance Team and other key stakeholders.
Act as a member of the MHCZ Management Team. Perform additional tasks assigned by the direct manager.
REQUIREMENTS
Strong understanding of Compliance Management processes and governance principles. Good knowledge of Quality Management Systems, including ISO 9001 and IATF 16949. Strong knowledge of Business Continuity Management (BCMS) and Risk Management methodologies. Good understanding of GDPR and Data Protection requirements.
Knowledge of TISAX, Information Security, Cyber Security, and NIS2 requirements is highly desirable. Understanding of audit processes and compliance frameworks. Knowledge of Operational Excellence and Continuous Improvement methodologies. Personal Profile Proactive and self-driven personality.
Ability to manage multiple priorities in a dynamic environment. Strong organizational and leadership capabilities.
Resilient mindset with a focus on continuous improvement and business Skills Risk Management Process Improvement Continuous Improvement Data Analysis Operational Risk IT Security & Risk Management Risk Analysis Finance Risk Analysis Process Development Vulnerability Assessment Competencies Strategic Drive & Innovation (FCC) PCL1 Achievement Orientation (D) PCL1 Adaptability & Learning (FCC) PCL1 Cooperation & Collaboration (D) PCL1 Managing Execution (E) PCL1 Impact & Influence (D) PCL1 Organizational Awareness (E) PCL1