Risk Engineer, Cyber

Risk Engineer, Cyber

As Our New Risk Engineer You Will Have The Opportunity to Help Shape RiskPoint’s Cyber Risk Engineering Capabilities

What Will You Do?

As our Risk Engineer, Cyber, you will independently assess the cyber risk posture of organizations ranging from mid-sized companies to large and complex enterprises. You will evaluate cybersecurity maturity, identify material risk factors and control gaps, and translate technical findings into clear, commercially relevant insights that support informed underwriting decisions and sustainable portfolio growth.

The role also extends into our Risk Engineering services currently comprised of tabletops and on-site risk assessments. The services require you to be comfortable leading discussions and guiding the clients through the process. Our services are value adding to our clients and not maturity review. We want to maintain a long-term relationship and talk openly about the exposures.

You will collaborate closely with colleagues across Cyber Underwriting, Claims, and the wider RiskPoint organization, as well as with brokers, clients, and external partners across multiple European countries. We are therefore looking for someone who is analytical, inquisitive, technically minded, and comfortable communicating complex technical matters to both technical and non-technical audiences.

Key responsibilities include:

• Independently evaluating cybersecurity controls and identifying gaps in an organization’s security posture.
• Conducting cyber risk assessments and reviewing complex risks to support underwriting decisions.
• Assessing and scoring cybersecurity maturity using, established frameworks and methodologies.
• Delivering technical feedback and recommendations to underwriters, brokers, and clients.
• Supporting client onboarding activities and the delivery of Risk Engineering services.
• Representing RiskPoint at client meetings, conferences, and industry events where appropriate.
• Translating technical findings into clear underwriting implications and recommending proportionate actions based on materiality and risk.
• Contributing to the development of RiskPoint’s cyber risk assessment methodologies, tools, and technical capabilities.

This position is newly created to support the continued growth of RiskPoint’s Cyber Insurance business. Particularly in Germany. You will have the opportunity to help shape RiskPoint’s cyber risk engineering capabilities, influence how cyber risk is assessed and managed, and further develop your own expertise within one of the insurance industry’s fastest-growing segments.

The position is based in Germany and offers flexibility for hybrid working depending on location. Regular travel within Germany and occasionally across Europe will be a part of the job.

About You

We are looking for someone who is inquisitive, technically minded, commercially aware, and able to solve complex problems while communicating technical concepts to diverse audiences.

To be successful in this role, you should have:

• Experience within cybersecurity, cyber risk management, IT security, risk engineering, consulting, incident response, or a related field.
• Strong understanding of cyber-attack techniques, threat actors, and cybersecurity controls.
• Experience evaluating security maturity against recognized frameworks and best practices.
• The ability to interpret technical findings and translate them into business and insurance-relevant risk implications.
• Strong analytical skills and a structured approach to investigating risk.
• Excellent interpersonal and stakeholder management skills.
• The ability to work independently while contributing to an international and collaborative team environment.

The following would be considered advantageous:

• Experience in cyber insurance.
• Experience performing security assessments, audits, or penetration testing.
• Incident response or threat intelligence experience.
• Certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Auditor, OSCP, GSEC, or similar.
• Experience with security rating services, data analysis, or external attack surface management platforms.
• Experience communicating cybersecurity risk to senior stakeholders or non-technical decision-makers.
• Experience assessing complex enterprise environments, including cloud, third-party, or industrial/OT environments.

You must have current residency in Germany with the necessary work and residency permits in place before applying.

Spoken and written fluency in German and English is a requirement for this role.

About Your Team

You will join RiskPoint’s European Cyber Risk Engineering Team, a specialist group supporting cyber underwriting activities across multiple markets. The team works closely with underwriters, claims specialists, brokers, clients, and external partners to evaluate cyber risk and continuously improve RiskPoint’s cyber offering.

As the Germany-based Risk Engineer, you will act as an important local representative of RiskPoint’s cyber capabilities in Germany while remaining fully integrated within the international team. You will collaborate daily with colleagues across Europe and contribute to the ongoing development of cyber risk frameworks, methodologies, and client services.

Your colleagues form part of a wider European Cyber organization spanning multiple countries and combining underwriting, claims, and risk engineering expertise to address an increasingly complex cyber threat landscape.

How Do You Apply?

We are looking forward to receiving your CV and answers to our 2 specific questions via the application form below.  Please apply in English.

We wish to receive your application by 20 November. We review applications on a rolling basis, so encourage you to apply early

For more information, please contact Torbjörn Flybring, Cyber Risk Engineering Manager via .

Please note that we do not accept applications via email.  All further communication will be in English.