Information Security Manager – Governance, Risk & Compliance

Information Security Manager – Governance, Risk & Compliance

Budapest, Hungary — thyssenkrupp Components Technology Hungary Kft

Job details

Type of contract:Full-time, Permanent

Experience level:Professionals

Remote work:Hybrid

Job field:IT

Status:Ongoing recruitment, entry date flexible

Posting date:2026/10/13

Job number:HU_RS_01626

Share job: LinkedInXingE-Mail

Arrow RightApply now StarToggle share menu

Your responsibilities

As Information Security Manager – Governance, Risk & Compliance, you are accountable for information security governance, risk and compliance management of the Business Unit Bilstein Motion Solutions across three legal entities and more than 25 plants. You ensure a transparent and audit-proof view of the requirements we fulfill – including TISAX, ISO/IEC 27001, NIS2 and OEM customer-specific requirements – of the information security risks we carry, and of the decisions taken to treat, transfer or accept them.

You safeguard the TISAX labels on which OEM nominations and the exchange of development and prototype data depend, translate regulatory and contractual requirements into effective controls for IT, OT and the plants, steer the audit program and ensure that suppliers and service providers meet the same standard.

• Risk management: Define and continuously improve the risk management methodology in line with ISO/IEC 27005 and ISO 31000, moderate risk assessments for IT services, plants, OT environments, projects and outsourcing arrangements, and maintain the BU-wide risk register through to treatment or formal risk acceptance.
• Compliance management: Maintain the compliance register covering TISAX (VDA ISA), ISO/IEC 27001, NIS2 and its national implementations, GDPR interfaces and OEM customer-specific requirements, and evaluate information security clauses in OEM supply contracts, quality agreements and non-disclosure agreements.
• TISAX: Manage TISAX end-to-end – participant registration and assessment scopes in the ENX portal, assessment planning per site and assessment objective, timely label renewal and sharing of results with OEM customers.
• Audit management: Plan and coordinate certification audits, run the internal ISMS audit program across all legal entities and plants, and drive findings and corrective actions through to closure.
• Third-party security: Own the information security lifecycle for suppliers and service providers, define TISAX label requirements for sub-suppliers and development partners, and flow down OEM requirements together with Procurement and Legal.
• Governance: Maintain the information security policy framework and the exception process, define information security KPIs, prepare the ISMS management review and align the ISMS with IATF 16949, data protection management and ISO/IEC 42001.
• Stakeholder management: Act as the central point of contact for plant and regional ISOs, IT and plant management, and report the risk situation to the Global Information Security Officer and executive management.

Your profile

• Education: University degree in Information Security, Computer Science, Business Informatics or a comparable field, or an equivalent professional qualification.
• Certifications: ISO/IEC 27001 Lead Auditor or Lead Implementer, CISM, CISA, CRISC or CISSP.
• Familiarity with IATF 16949, OT security (IEC 62443) and product cybersecurity (ISO/SAE 21434, UNECE R155).
• Experience: Minimum of five years of professional experience in information security, including at least three years in ISMS governance, risk or compliance management.
• ISMS: Proven experience in operating or auditing an ISMS based on ISO/IEC 27001, including risk assessment and risk treatment.
• TISAX: In-depth knowledge of TISAX and the VDA ISA catalogue, ideally including prototype protection, and practical experience in preparing and supporting TISAX assessments.
• Regulation: Knowledge of NIS2 and its national implementations as well as of GDPR interfaces.
• Automotive: Experience with OEM customer-specific requirements, information security clauses in automotive supply contracts and supply chain security risk management.
• Working style: Analytical, structured and independent; confident in multicultural environments and in presenting complex topics concisely to executive management.
• Languages: Business fluent English (C1); German language skills are an advantage.

Your benefits

• A modern office in the 11th district is waiting for you to support your creativity with fun community places, cafe rooms, an own cinema and a skybar
• We support you with flexible working hours and home office opportunity
• Competitive salary and wide range of other benefits (cafeteria & bonus) are provided to you
• You can be part of a successful and growing company in the field of technology
• You can learn new languages in small groups, selecting from 5 languages
• We organize leisure time activities (board games, sport activities)

Contact

Be part of a more than 20 years old success story that was born in Budapest but got international with thyssenkrupp. We are proud that the dedication of our colleagues and the innovative knowledge made our Budapest development center truly successful.

We have a place for you in our dynamically growing company if you value professional development and would like to be part of a cheerful international environment. You can work on challenging developments in the automotive industry together with the leading car manufacturers all over the world.

Get to know more about us and bring your unique self to our company!

tyssenkrupp Components Technology Hungary Ltd. 1117. Budapest, Budafoki street 56/C

Important to us

Health and Wellness

Health & Safety

Highest health & safety standards and a wide range of health promotion and healthcare activities.

Highest health & safety standards and a wide range of health promotion and healthcare activities.

Pension and Retirement

Pension

We have various financial models to give you individual support.

We have various financial models to give you individual support.

Collaboration and Teamwork

Collaboration

Collegiality is of huge importance – we treat everyone with respect and appreciation.

Collegiality is of huge importance – we treat everyone with respect and appreciation.

Professional Development

Development

Training and education programs to help you develop professionally and personally.

Training and education programs to help you develop professionally and personally.

Compensation and Salary

Compensation & benefits

Fair working conditions and competitive pay are an important basis for us.

Fair working conditions and competitive pay are an important basis for us.

Diversity and Inclusion

Diversity

We promote an open and tolerant work culture.

We promote an open and tolerant work culture.

Work-Life Balance

Work-Life Balance

Work-Life Balance: we guarantee regular working hours to support work-life balance.

Work-Life Balance: we guarantee regular working hours to support work-life balance.

Creative and Innovation

Creative leeway

We offer a work environment in which you can try out new solutions in a no blame culture.

We offer a work environment in which you can try out new solutions in a no blame culture.

Vacation and Time Off

Vacation and paid time off

Vacation and paid time off: Paid vacation, sick leave and personal days.

Vacation and paid time off: Paid vacation, sick leave and personal days.

Sustainability and Environment

Sustainability

We act with responsibility and environmental awareness. We support sociopolitical initiatives and focus on resource efficiency.

We act with responsibility and environmental awareness. We support sociopolitical initiatives and focus on resource efficiency.

Onboarding and Training

Onboarding

Onboarding: individual and personal support to help you get started in your new job.

Onboarding: individual and personal support to help you get started in your new job.