Job Description

About TecAlliance

We are TecAlliance — founded by more than 30 automotive aftermarket companies as a neutral Data‑as‑a‑Service market connector, serving as the neutral data terrain that interconnects them. With over 1,100 employees worldwide and customers in 140 countries, we enable the market — we never compete with it.

About the role

Join us in this full-time role, working 40 hours per week. You’ll be part of an English-speaking, fully EU remote team of Information Security professionals focused on protecting TecAlliance’s platforms and data. You report to our Director Information Security, Martin Ruf.

Attackers know it: the easiest way is rarely through the firewall — it’s through a person. But they also know the flip side: a person who knows what to look for is the earliest warning system they have to beat, and every single report can stop an attack. Humans are the one system you can’t patch, but you can train them and that´s the core of your job. Security is not just about systems; it’s about people too — and as our Cyber Risk Training Specialist (m/f/d), you cover both angles. You take people from unaware to confident in knowing exactly what to do: with training and phishing simulations that stick, a clear view of where our real risks are, and Business Continuity and crisis plans that hold when it matters.

Your goal: continuously reduce the number and impact of incidents involving human factors — turning our people into a human firewall that spots, stops and reports threats before they become incidents.

Make an impact with these tasks

• Deliver transparency of cyber risks on company level, stay up to date on threats and the risk landscape, and provide methodology and support for risk estimations of other teams (e.g. penetration testing).
• Deliver trainings and awareness measures across the organization, follow up on participation, and measure and improve the awareness level globally.
• Ensure creation, maintenance and tests of the Business Continuity and Crisis plans.
• Continuously reduce the number and impact of incidents involving human factors by driving projects such as the Company Risk Profile and Security-/Privacy-/Awareness-Trainings.
• Contribute to improving tools, workflows, and practices, decide on your own workload prioritization, and escalate blockers.

Bring your skills and ideas

Must-haves

• Completed degree in IT Security or a comparable qualification or profound job experience within Cyber Security
• Experience developing and delivering security-focused training programs and awareness campaigns, helping people recognize risks and know how to act.
• Knowledge of risk evaluation and management methodologies, and familiarity with information security risks and attack patterns.
• Fluent English and a proven ability to make security easy to understand: you explain complex topics clearly and in the right language, whether to non-technical colleagues or technical experts.

Nice-to-haves

• German or Spanish language skills.

What we offer

Discover all the benefits that come with joining us here.

We’d love to hear from you. Please only apply with your CV (in English only) via the system. Applications outside of our applicant tracking system cannot be considered due to GDPR.

• Please note
• that TecAlliance can only consider candidates for employment who are legally authorized to work in a country listed in the job posting, where we have an established legal entity and payroll system. Unfortunately, we are currently unable to hire candidates who require relocation, visa support, or are located outside of that country. Of course you can apply, if you hold a work permit and are willing to / or already moved to the country. Thank you for your understanding.
• that it is not possible to work outside of the country you are applying for. Meaning that, if you apply e.g. for Germany, you must work from within Germany. It is not possible to work from abroad. You can work at any location within the borders of the listed country, unless the job posting specifies a certain City.
• if you apply for Spain - that TecAlliance España is committed to equal opportunities in line with our Spanish Equality Plan. For selected roles with low female or diverse representation, and only where final candidates are assessed as equally qualified against the job requirements, positive action measures may apply as permitted by law. Any related data collection is voluntary and handled in accordance with data protection regulations. In case of questions in that regard, please reach out to equality.spain@tecalliance.net with the subject "Spain Equality Plan".
• the Contract Title is " Cyber Risk & Training Specialist "