Information Security Risk Manager (f/m/d)

Médecins Sans Frontières (MSF) is a private, non-governmental, humanitarian organisation that provides medical aid in over 70 countries worldwide. The headquarter of the German section is in Berlin. Here, you will work with over 300 employees in various departments every day to support people in need. Our organisational culture is based on diversity, progress, and open and respectful cooperation. We evaluate incoming applications solely on the basis of professional qualifications and consider them regardless of age, gender identity, sexual orientation, disability, religion, or belief system.

BE PART OF THE TEAM

Médecins Sans Frontières (MSF) is seeking an Information Security Risk Manager to strengthen its information security maturity. This fixed-term role focuses on assessing existing security practices, defining a prioritized, multi-year roadmap, and initiating key improvements.

YOU WILL

As a team member, you will support our projects on site - without actually being there. You will be responsible for the following tasks:

Assess the current information security landscape by reviewing existing policies, processes, tools, and systems, and by conducting risk and gap analyses aligned with organizational priorities and operational realities.
Define and implement an information security risk management strategy by developing roadmaps and allocating resources in line with IT risk assessments, to address vulnerabilities and strengthen organizational resilience.
Establish and oversee an information security policy framework in compliance with GDPR, local regulations, and international MSF standards, to safeguard data, manage third-party risks, and ensure regulatory alignment.
Create and manage standardized risk monitoring mechanisms by developing reporting tools and dashboards, to track risk metrics, strengthen collaboration, and enable proactive risk mitigation.
Develop and validate an incident response plan by defining procedures and by supporting testing activities such as tabletop exercises or simulations.
Conduct and coordinate training and awareness initiatives for staff and IT teams in line with security policies and best practices, to build organizational knowledge, preparedness, and accountability.
Provide expert guidance to management and stakeholders on security measures and policy improvements, to enable informed decision-making and support organizational compliance.

YOU HAVE

The following professional qualifications and personal qualities are important to us:

5+ years of relevant professional experience in information security, IT risk management, or security governance roles, including hands-on experience with risk assessments, policy development, and security roadmap design.
Experience designing, reviewing, and maintaining security policies, standards, and control frameworks.
Practical experience with incident response planning, risk monitoring, and security reporting.
Familiarity with common security and risk frameworks with the ability to adapt them pragmatically to organizational needs.
Strong analytical and structuring skills, with the ability to work independently in a complex environment.
Pragmatic, solution-oriented mindset, suited to resource-constrained and decentralized contexts.
Ability to prioritize effectively and deliver tangible outcomes within a fixed term mandate.
Fluent and effective communication in English in professional contexts (C1 level). Intermediate knowledge of German (B1 level) is a plus.

OUR OFFER

Hard facts

From 4.020€ to max. 5.084€ starting salary (for full-time employment) + 13th monthly salary
30 days holiday plus days off on 24. and 31.12.

Life Balance

Flexible working hours and part-time models
Mobile working with presence in our office depending on work requirements incl. technical equipment
Work from another European country for up to 6 weeks a year
Sabbatical

Nice to have

Office: kitchens, fruit/snacks, drinks, modern equipment
Job ticket or Deutschlandticket subsidy
Urban Sports Membership
Bicycle cellar
and much more

Trainings

Choice of various further training opportunities
Access to e-learning platforms
Offers/topic weeks on mental health, well-being and EDI
Coaching

Does that sound good? Then become part of our team. We look forward to receiving your application.