> Markdown version of [/jobs/ext/1432631-head-of-information-security-governance](https://www.wearedevelopers.com/jobs/ext/1432631-head-of-information-security-governance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Head of Information Security Governance - **Company:** Daiichi Sankyo, Inc. All Rights Reserved - **Location:** München, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Data Centers, SAP (Applications), Load Balancing - **Published:** July 25, 2026 - **Apply:** https://www.careerjet.de/jobad/dea1ae91fe94eb2666cb5b2b7b07b69e36 ## About the Role * Minimum 12+ years of experience in cyber security with senior or leadership roles in global organizations * Advanced degree in Information Security, Cyber Security, IT Security, or related fields, or equivalent professional experience * Relevant certifications such as CISSP, CISM, CRISC, CISA, ISO/IEC27001 Lead Auditor/Implementor or equivalent * Proven strategic leadership in Cyber GRC, with expertise in frameworks like NIST CSF/800-53 and ISO/IEC 27000 series * Experience building and managing enterprise management systems, control frameworks, and audit readiness * Track record of driving compliance across multiple regulatory jurisdictions and managing contractual security requirements * Strong communication skills to engage stakeholders at all levels and foster an inclusive, high-performance culture * Experience leading international, cross-functional teams with strategic planning and operational excellence * Fluent in German and English (written and spoken); knowledge of Japanese or experience working with Japanese teams is a plus ## Description We use cookies to offer you the best possible website experience. Your cookie preferences will be stored in your browser's local storage. This includes cookies necessary for the website's operation. Additionally, you can freely decide and change any time whether you accept cookies or choose to opt out of cookies to improve website's performance, as well as cookies used to display content tailored to your interests. Your experience of the site and the services we are able to offer may be impacted if you do not accept all cookies. Modify Cookie Preferences Reject All Cookies Accept All Cookies Search Jobs Search Jobs, * Lead the global Cyber GRC strategy, setting long-term direction and driving execution across the organization. * Continuously develop and improve the Daiichi Sankyo Cyber GRC Framework to ensure measurable adherence and anticipate future developments. * Define and manage enterprise-level cyber policies, standards, and guidelines within the Daiichi Sankyo Management System. * Own the enterprise-wide cyber risk management framework, enabling consistent risk assessment, reporting, and mitigation aligned with risk appetite. * Ensure compliance with cyber-related regulations and contracts; lead audit readiness and support cyber audits. * Develop and implement third-party and supply chain security strategies to manage ecosystem risks. * Oversee cybersecurity due diligence and integration during mergers and acquisitions. * Promote continuous improvement by embedding cyber risks into business decision-making and enabling effective policy adoption. * Lead and develop a high-performing global Cyber GRC team and drive executive stakeholder engagement across the organization, Working at Daiichi Sankyo is more than just a job - it is your chance to make a difference and change patients' lives for the better. We can only achieve this ambitious goal together. That is why we foster a culture of mutual respect and continuous learning, with a strong commitment to inclusion and diversity. Here, you will have the opportunity to grow, think boldly, and contribute your ideas. If you have a proactive mindset and passion for addressing the needs of patients, we eagerly await your application. Professionals © 2026 Daiichi Sankyo, Inc. All Rights Reserved. × Cookie Consent Manager When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can't be turned off. Required Cookies Show More Details Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function: * "route" is used for session stickiness * "careerSiteCompanyId" is used to send the request to the correct data center * "JSESSIONID" is placed on the visitor's device during the session so the server can identify the visitor * "Load balancer cookie" (actual cookie name may vary) prevents a visitor from bouncing from one instance to another ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [gRPC Load Balancing Deep Dive](https://www.wearedevelopers.com/videos/1576-grpc-load-balancing-deep-dive) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) ## Related Articles - [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)