Cyber Security Framework Manager

About the role

Join BASF Digital Hub Madrid as a Cyber Security Framework Manager. You will be responsible for overseeing the group‑wide cyber security framework, ensuring it aligns with ISO 27001 and other regulatory requirements, and communicating the framework across BASF’s global organisations.

Key responsibilities

• Maintain and continuously improve the cyber security requirement framework for the BASF Group.
• Ensure the framework complies with ISO 27001 and aligns with standards such as NIS2 and TISAX.
• Collaborate with ISMS, risk management and compliance teams to develop and update policies and procedures.
• Act as the central point of contact for stakeholders at all hierarchical levels, including governance, legal and operational units.
• Coordinate the community of authors and stakeholders responsible for the framework’s content.
• Enhance the overall Governance, Risk and Compliance (GRC) approach to strengthen BASF’s security posture.

Required profile

• Academic degree in Cyber Security, Computer Science, Information Technology or a related field.
• Several years of experience in cyber security governance, risk and compliance within multinational organisations.
• Proven experience implementing ISO 27001 and familiarity with NIS2, TISAX or similar regulations.
• Ability to work autonomously, with a structured, analytical and quality‑focused mindset.
• Excellent communication skills in English; additional language (German or others) is a plus.
• Security certifications such as CISSP, CISM or ISO 27001 Lead Implementer/Auditor are advantageous.

Required skills

• ISO 27001 implementation and auditing
• NIS2 compliance
• TISAX framework
• Cyber security governance
• Risk management
• Compliance management
• CISSP (optional)
• CISM (optional)

What we offer

• A secure work environment prioritising health, safety and wellbeing.
• Flexible work schedule with home‑office options.
• Opportunities to develop innovative digital solutions in a global, diverse team.