Cyber Security M&A Risk Manager (m/f/d)

About the role

You will join the Cyber Governance, Risk and Compliance Team at BASF Digital Hub Madrid, managing the Cyber Security Framework for the BASF Group. In this role you will work closely with Corporate M&A, Legal, Data Privacy, IT and business units to assess and manage cyber security risks throughout M&A projects.

Key responsibilities

• Analyze investments and divestitures from a cyber security perspective across the full M&A lifecycle, including due diligence, signing, closing, integration and separation.
• Identify, assess and prioritize cyber security risks of target companies, joint ventures and divested businesses, and define appropriate controls and mitigation measures.
• Evaluate the cyber security posture of systems, assets, cloud services, third‑party providers and operational technology using a risk‑based approach.
• Maintain deal‑specific cyber security risk registers, treatment plans and escalation procedures.
• Provide GRC guidance for Day‑1 readiness, integration, carve‑out, transition services and remediation activities.

Required profile

• Bachelor’s degree in Business Management, IT, Cyber Security or a related field.
• 4–7 years of relevant experience, preferably in cyber security governance, risk management, compliance and project management.
• Experience with M&A, investments, divestitures or corporate transactions is highly desirable.
• Strong understanding of cyber security risk management principles and ability to translate technical findings into business and contractual implications.
• Knowledge of relevant laws, regulations and industry standards applicable to international transactions.

Required skills

• Cyber security due diligence, risk assessments, threat modeling and vulnerability assessments.
• Evaluation of complex IT, cloud, third‑party and operational technology environments.
• Relevant certifications such as CISSP, CISM, CRISC or ISO 27001 Lead Auditor (preferred).

What we offer

• Secure work environment with health, safety and wellbeing as top priority.
• Flexible work schedule and hybrid home‑office options.
• Learning and development opportunities and 25 holiday days plus 5 additional days.
• International team, global projects and relocation assistance to Madrid.