Cyber Security M&A Risk Manager (m/f/d)

About the Company

Responsibilities

• ● ges the Cyber Security Framework for the whole BASF Group. In this role, you will work closely with Corporate M&A, Legal, Data Privacy, IT, business units, and transaction teams to assess and manage cyber security risks in Corporate M&A Projects (Investments/Divestitures).
• ● RESPONSIBILITIES
• ● Analyzing investments and divestitures from a cyber security perspective throughout the M&A lifecycle, from initial assessment and due diligence through signing, closing, integration, or separation, as well as participation in Post-Merger Audits.
• ● Identifying, assessing, and prioritizing cyber security risks of target companies, joint ventures, and divested businesses, and defining appropriate controls and mitigation measures based on the transaction context.
• ● Evaluating the cyber security posture of relevant organizations, systems, assets, infrastructure, applications, cloud services, data, third parties, and operational technology, where applicable, using a risk-based approach.
• ● Collaborating closely with Corporate M&A, Legal, Data Privacy, IT, business representatives, and external advisors to ensure that cyber security considerations are reflected in transaction decisions and contractual arrangements.
• ● Facilitating cyber security due diligence assessments, risk workshops, threat analyses, and targeted vulnerability assessments to identify material risks, dependencies, and potential deal impacts.
• ● Maintaining deal-specific cyber security risk registers and associated risk treatment plans, including clear ownership, priorities, target dates, and escalation of material or residual risks.
• ● Providing cyber security GRC guidance for Day-1 readiness, integration, carve-out and separation activities, transition service arrangements, and the implementation or transfer of required security controls.
• ● QUALIFICATIONS
• ● Bachelor's degree in Business Management, Information Technology, Cyber Security, or a related field
• ● years of relevant work experience
• ● Strong understanding of cyber security risk management principles and the ability to translate technical findings into business, financial, contractual, and transaction-related risk implications
• ● Knowledge of relevant laws, regulations, and industry standards related to cyber security, including their application within international transactions
• ● Passion for working in an international, cross-functional, and transaction-driven environment, including the ability to manage sensitive information and competing priorities
• ● Excellent communication and interpersonal skills, with the ability to work effectively with interdisciplinary teams and present cyber security risks clearly to technical stakeholders, business leaders, and decision-makers
• ● Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor, or comparable qualifications are a plus
• ● Confident communication in English, both spoken and written.
• ● WHAT WE OFFER
• ● A secure work environment because your health, safety and wellbeing is always our top priority.