LEAD IT SECURITY & GOVERNANCE (M/F/D)

YOUR JOB AS PART OF THE CANYON CREW

• Function Leadership & Development: Leading, inspiring, and continuously building out the IT Security & Governance function drives team maturity and organizational growth.
• Framework Design & Implementation: Designing, implementing, and continuously refining IT Security and Governance frameworks ensures alignment with NIS2, EU AI Act, and Cyber Resilience Act (CRA) standards.
• Software License Management: Owning end-to-end software license management guarantees organizational compliance, audit readiness, and commercial cost optimization.
• Policy & Control Definition: Defining and maintaining IT policies, security standards, and governance controls establishes clear guidelines across all business units.
• Risk & Incident Management: Steering IT risk management, security incident response procedures, and business continuity planning safeguards critical operational assets.
• Audits & Regulatory Contact: Acting as the primary contact for authorities and auditors facilitates smooth internal and external audit executions and timely finding remediations.
• Reporting & KPI Management: Setting up and tracking key performance indicators (KPIs), SLAs, and regular reporting structures provides transparent insights to executive leadership.
• Strategic Stakeholder Alignment: Building strong relationships with internal leaders across IT and business departments ensures security requirements integrate smoothly into company strategy.

HOW YOU BECOME PART OF THE RACE

• Professional Background: Several years of progressive experience in IT Security and/or IT Governance-ideally paired with proven functional or team leadership experience-forms your foundation.
• Regulatory Expertise: Solid knowledge of relevant frameworks and regulations (such as NIS2, EU AI Act, CRA, ISO 27001, or comparable standards) characterizes your technical capability.
• Audit & Compliance Operations: Proven hands-on experience interfacing with auditors and regulatory authorities supports smooth compliance management.
• Pragmatic Mindset: The ability to translate complex regulatory requirements into pragmatic, actionable processes combines with a balance between technical depth and commercial awareness.
• Stakeholder & Service Orientation: High customer orientation paired with exceptional communication capabilities enables effective collaboration across all leadership levels.
• Language Skills: Business fluent English communication skills (both written and spoken) allow for clear collaboration across international teams and external partner networks.

We offer

HIGHLIGHTS ON YOUR CANYON TOUR

• Canyon Crew & Culture: Experience the Canyon Spirit at our legendary crew rides and regular employee events. You’ll also benefit from our professional social and health counseling services.
• Feel Canyon (Employee Discounts): Take your passion to the road—with attractive employee discounts on our bikes, accessories, and apparel.
• Compensation & Benefits: We offer fair, performance-based compensation as well as Christmas and vacation bonuses. Your future and security are covered by a company pension plan and accident insurance.
• Flexibility & Family: Take advantage of 30 days of vacation per year as well as our targeted support for balancing work and family life (especially for childcare during school breaks).
• Daily Life & Local Mobility: Enjoy subsidized meals in our in-house bistros and a discounted Germany-wide train pass for your commute.

THE ROLE

As Lead IT Security & Governance, you lead and develop our IT Security & Governance function, encompassing IT Security, Governance frameworks, and Software License Management. Reporting directly to the VP Global IT, you serve as an inspirational, goal-oriented leader responsible for building out the function and embedding pragmatic security standards across Canyon. In this high-impact role, you balance strategic decision-making, regulatory alignment (including NIS2, EU AI Act, and CRA), and commercial cost optimization, acting as a trusted sparring partner to internal leadership, authorities, and external auditors.