Cyber Security Risk Specialist – GRC & OT Focus

About the role

We are looking for an experienced Cyber Security Risk Specialist to join the CISO organization within BASF’s Digital Hub in Madrid. You will work in the Cyber Governance, Risk and Compliance (GRC) product family, supporting the implementation of the group‑wide cyber security risk management framework across IT and OT environments.

Key responsibilities

• Support Asset Owners and Risk Owners in operationalising cyber risk management processes for both IT and OT (Automation Technology) environments.
• Collaborate with the global risk community, gather feedback from OT stakeholders and communicate updates to ensure alignment.
• Develop and deliver awareness material and training sessions on cyber security risk management, with dedicated OT modules.
• Design and pilot new GRC processes to address the evolving threat landscape in IT and OT.
• Research emerging threats using sources such as Google Threat Intelligence and Dragos.
• Conduct on‑demand strategic risk assessments to identify emerging risks affecting production continuity and safety.

Required profile

• Proven experience in cyber security risk management, preferably within an industrial or chemical environment.
• Strong understanding of both IT and OT security challenges.
• Ability to work with cross‑functional teams and communicate complex risk concepts clearly.

Required skills

• ISO 27001
• OT (Automation Technology) security
• Google Threat Intelligence
• Dragos platform