Team Lead OT Security

Team Lead OT Security The Opportunity If you're currently doing OT security work inside someone else's framework, this is a chance to build your own. This is a newly created leadership role, giving you ownership of the OT cybersecurity strategy and NIS2 compliance programme for a growing portfolio of critical infrastructure assets across Europe. You'll set the direction, not just execute someone else's. The Role Own and evolve the OT cybersecurity strategy, governance framework and controls across the asset portfolio Translate NIS2 and country-specific regulation into a practical, auditable compliance programme Build a consistent OT risk management framework, giving full visibility across assets and dependencies Set OT security standards covering segmentation, remote access, logging, hardening and backup integrity, aligned to IEC 62443 and NIST Manage third-party and O&M cybersecurity governance, including contracts and remote access assurance Build and run OT incident response capability, including playbooks and post-incident analysis Act as the central point of contact across Operations, Engineering, IT/OT, Legal, Audit and external authorities Build and lead your own OT cybersecurity team, plus the external partner ecosystem The Company You'll be joining an internationally operating business with a fast-growing, multi-site operational footprint across Europe. The business is scaling quickly, which means the OT security function is still being built, not just maintained: you'll have real influence over how it takes shape. It's also a chance to put your expertise to work protecting infrastructure that genuinely matters to how the business runs day to day. What You'll Need At least five years' experience in OT/ICS cybersecurity within energy, utilities or critical infrastructure Proven track record leading multi-country or multi-stakeholder OT security programmes Strong technical grounding in SCADA environments, industrial networks, segmentation and secure remote access Hands-on experience with IEC 62443 and a solid understanding of NIS2 requirements and audit expectations Experience managing external vendors and third-party risk frameworks Confident communicator, comfortable moving between executive and technical conversations Fluent English How to Apply Interested? Get in touch with MAM Gruppe. Your CV doesn't need to be up to date, send what you have, or call for a confidential conversation.

Director, Cyber Security Consulting The Opportunity Ready to step into a role where your name is on the door, not buried in an org chart? This is a Director-level position with genuine weight behind it - the kind of opportunity to shape a cyber security practice, own client relationships, and make decisions that matter. If you're a senior consultant who's been doing the work but not getting the platform, this is worth reading. The Role You'll lead complex cyber security consulting engagements across Germany, working with clients across sectors on strategy, risk, architecture, and programme delivery. At Director level, that means driving business development as much as delivery - building relationships, identifying opportunities, and bringing in the mandates as well as executing them. You'll be a visible figure in the market, representing the practice externally and mentoring the consultants around you internally. Expect variety: no two clients are the same, and the work spans the full spectrum of cyber security advisory. The Company Our client is a specialist consulting business with a strong footprint in the German market. They're known for the quality of their advisory work and the calibre of the people they hire. This is not a firm where Directors spend their time managing PowerPoint. The environment is fast-moving, collegial, and built around people who are genuinely expert in what they do. What You'll Need Significant experience in cyber security consulting, with a track record at senior level Proven ability to develop and convert business development opportunities Deep fluency in the German market and the cyber security landscape within it Native or near-native German, with strong English alongside Credibility with C-suite stakeholders and the confidence to lead from the front How to Apply Send your CV to the MAM Gruppe team. It doesn't need to be up to date - send what you have, or just get in touch for a conversation.

ICT Risk Manager Location: Prague / Hybrid Our client is seeking an ICT Risk Manager to join a Second Line of Defence function, supporting technology risk governance, oversight and regulatory compliance activities within a regulated environment. Key Responsibilities: Provide independent oversight of ICT, cyber and technology-related risks. Review and challenge risk assessments, controls and remediation activities. Support the development and enhancement of ICT risk frameworks and governance processes. Monitor technology, security, outsourcing and operational resilience risks. Contribute to regulatory compliance and risk reporting activities. Support third-party and vendor risk oversight initiatives. Collaborate with stakeholders across risk, technology, security and business functions. Your Profile: Several years of experience within ICT risk, technology risk, cyber risk or operational risk environments. Understanding of risk governance and Second Line of Defence responsibilities. Experience within banking, financial services or another regulated environment. Knowledge of ICT risk management, operational resilience and regulatory frameworks. Strong analytical, communication and stakeholder management skills. Relevant certifications such as CRISC, CISA or CISSP would be advantageous. Fluent English language skills. What’s on Offer? Opportunity to work within an international and regulated environment. Exposure to technology risk, resilience and governance initiatives. Flexible hybrid working model. Long-term development and progression opportunities.

Director, ICT Risk and Security Reporting Most technology risk reporting roles exist to document what's already happened. This one exists to shape what happens next. The Opportunity This is a newly created Director-level position within the Risk function of one of Europe's leading international banks. You'll be joining at the point where the function is being built, not inherited, which means you'll have genuine influence over how ICT risk and security reporting is structured, governed, and matured from the ground up. The regulatory environment is as complex as it gets right now: DORA is live, EBA ICT guidelines are evolving, and banks are under real scrutiny on operational resilience. You'll be working at the centre of all of it, translating technical and cyber risk into intelligence that drives decisions at board and executive level. Critically, this isn't a back-seat reporting role. You'll be expected to challenge the first line, push back where data quality or risk transparency falls short, and bring an architectural view of technology risk that goes beyond compliance checklists. The business wants someone with enough credibility and backbone to be genuinely heard. There is a clear path upward for the right person. This is a role you can grow into a broader leadership position, in a bank that operates at international scale. The Role Own and evolve the ICT Risk and Security reporting framework across the bank Deliver board-level, executive, and risk committee reporting on technology and cyber risk Translate complex technical and security risk data into clear, actionable business narratives Develop risk metrics, KRIs, dashboards, and management information across ICT and cyber domains Identify emerging risks and systemic themes across technology, cyber, resilience, and third-party environments Challenge the first line on data quality, risk transparency, and governance consistency Support regulatory and governance obligations including DORA and EBA ICT guidelines Drive continuous improvement in reporting automation, data visualisation, and risk analytics Partner with senior stakeholders across Technology, Cyber Security, Risk, Compliance, and Internal Audit What You'll Need Significant experience in ICT Risk, Technology Risk, Cyber Risk, or Information Security Governance, ideally within banking or regulated financial services An architectural view of technology risk, with the ability to identify systemic issues, not just point-in-time findings Proven experience producing board-facing or executive-level risk reporting Strong working knowledge of DORA, EBA ICT guidelines, and operational resilience frameworks The credibility and confidence to challenge senior stakeholders and first-line teams Exceptional ability to communicate complex risk information clearly to non-technical audiences Relevant certifications such as CISA, CRISC, CISSP, or CGEIT are advantageous Fluent English required What's on Offer Competitive compensation package commensurate with Director-level seniority Company pension scheme and comprehensive risk coverage including accident insurance Car leasing and bike leasing schemes with tax advantages IT device leasing for personal use Hybrid working model based in Prague Clear scope for progression within an international banking group How to Apply Apply via the link below. Your CV doesn't need to be perfect, send what you have and we'll take it from there. If you'd prefer a conversation before committing to anything, just give us a call.