Information Security Risk Manager (f/m/d)
Médecins Sans Frontières (MSF) is a private, non-governmental, humanitarian organisation that provides medical aid in over 70 countries worldwide. The headquarter of the German section is in Berlin. Here, you will work with over 300 employees in various departments every day to support people in need. Our organisational culture is based on diversity, progress, and open and respectful cooperation. We evaluate incoming applications solely on the basis of professional qualifications and consider them regardless of age, gender identity, sexual orientation, disability, religion, or belief system.
BE PART OF THE TEAM
Médecins Sans Frontières (MSF) is seeking an Information Security Risk Manager to strengthen its information security maturity. This fixed-term role focuses on assessing existing security practices, defining a prioritized, multi-year roadmap, and initiating key improvements.
YOU WILL
As a team member, you will support our projects on site - without actually being there. You will be responsible for the following tasks:
- Assess the current information security landscape by reviewing existing policies, processes, tools, and systems, and by conducting risk and gap analyses aligned with organizational priorities and operational realities.
- Define and implement an information security risk management strategy by developing roadmaps and allocating resources in line with IT risk assessments, to address vulnerabilities and strengthen organizational resilience.
- Establish and oversee an information security policy framework in compliance with GDPR, local regulations, and international MSF standards, to safeguard data, manage third-party risks, and ensure regulatory alignment.
- Create and manage standardized risk monitoring mechanisms by developing reporting tools and dashboards, to track risk metrics, strengthen collaboration, and enable proactive risk mitigation.
- Develop and validate an incident response plan by defining procedures and by supporting testing activities such as tabletop exercises or simulations.
- Conduct and coordinate training and awareness initiatives for staff and IT teams in line with security policies and best practices, to build organizational knowledge, preparedness, and accountability.
- Provide expert guidance to management and stakeholders on security measures and policy improvements, to enable informed decision-making and support organizational compliance.
YOU HAVE
The following professional qualifications and personal qualities are important to us:
- 5+ years of relevant professional experience in information security, IT risk management, or security governance roles, including hands-on experience with risk assessments, policy development, and security roadmap design.
- Experience designing, reviewing, and maintaining security policies, standards, and control frameworks.
- Practical experience with incident response planning, risk monitoring, and security reporting.
- Familiarity with common security and risk frameworks with the ability to adapt them pragmatically to organizational needs.
- Strong analytical and structuring skills, with the ability to work independently in a complex environment.
- Pragmatic, solution-oriented mindset, suited to resource-constrained and decentralized contexts.
- Ability to prioritize effectively and deliver tangible outcomes within a fixed term mandate.
- Fluent and effective communication in English in professional contexts (C1 level). Intermediate knowledge of German (B1 level) is a plus.
OUR OFFER
Hard facts
- From 4.020€ to max. 5.084€ starting salary (for full-time employment) + 13th monthly salary
- 30 days holiday plus days off on 24. and 31.12.
Life Balance
- Flexible working hours and part-time models
- Mobile working with presence in our office depending on work requirements incl. technical equipment
- Work from another European country for up to 6 weeks a year
- Sabbatical
Nice to have
- Office: kitchens, fruit/snacks, drinks, modern equipment
- Job ticket or Deutschlandticket subsidy
- Urban Sports Membership
- Bicycle cellar
- and much more
Trainings
- Choice of various further training opportunities
- Access to e-learning platforms
- Offers/topic weeks on mental health, well-being and EDI
- Coaching
Does that sound good? Then become part of our team. We look forward to receiving your application.
