Senior IT Risk Officer

Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic, and labelling is accurate.

Eurofins is dedicated to delivering testing services that contribute to the health and safety of society and the planet, and to its corporate responsibility to protect the environment and ensure diversity, equity, and inclusion across the entire network of Eurofins companies.

Job Description As a Senior IT Risk Officer , you will play a key role in identifying, assessing and reducing IT and cybersecurity risks across Eurofins' European businesses.

You will independently perform IT risk assessments across laboratories, business units and IT environments, working closely with IT, security and business teams.

This role requires a solid technical understanding of IT infrastructure and cybersecurity , combined with strong risk assessment, communication and stakeholder management skills.

In addition to IT risk assessments, you will contribute to broader security and resilience initiatives, including phishing campaigns and IT resilience exercises.

The position requires frequent travel across Europe, approximately 35–50% of the time .

Your main responsibilities will include:

Independently planning and conducting IT and cybersecurity risk assessments across laboratories, regional infrastructure and central IT services.

Assessing technical and organizational controls covering areas such as network security, identity and access management, endpoint security, vulnerability management, cloud, logging and monitoring, backup and IT resilience .

Identifying technical weaknesses and evaluating their potential impact on business operations.

Challenging existing technical implementations and security controls where necessary.

Translating technical findings into clear business risks and pragmatic recommendations .

Producing high-quality reports and presenting assessment results to technical teams and management.

Following up on agreed remediation actions and evaluating whether identified risks have been adequately addressed.

Contributing to the continuous improvement of IT risk assessment methodologies.

Maintaining strong relationships with IT, security and business stakeholders.

Qualifications We are looking for an independent, technically curious and pragmatic professional who is comfortable investigating complex IT environments and challenging established practices when necessary.

You should have:

3–7 years of relevant experience in cybersecurity, information security, IT risk, IT audit or a related technical IT control function.

Experience performing IT risk assessments, security assessments or technical IT audits .

A good understanding of risk management and cybersecurity principles.

strong general technical understanding of areas such as networking, firewalls, Active Directory / Entra ID, IAM/MFA, endpoint security, vulnerability management, Windows/Linux infrastructure, cloud security, SIEM/logging, backup and disaster recovery.

The ability to understand technical architectures, identify realistic security risks and discuss them credibly with infrastructure and security engineers.

Strong analytical skills and the ability to distinguish significant risks from theoretical or low-impact issues.

Excellent written and verbal communication skills in English , with the ability to communicate technical risks to both technical and non-technical audiences.

Strong stakeholder management and negotiation skills.

Awillingness to travel frequently across Europe.

Knowledge of NIS2, EU data protection requirements and common cybersecurity frameworks is considered an advantage.

Education and certifications

A university degree in Computer Science, Cybersecurity, Information Systems, Engineering or another relevant field , or equivalent professional experience.

Relevant certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 or equivalent are an advantage but not mandatory.

Additional Information We support your development

Do you feel you don’t match 100% of the requirements? Don’t hesitate to apply anyway Eurofins companies are committed to supporting your career development.

Weembracediversity As an Equal Opportunity Employer, the Eurofins network of companies believes in strength and innovation through diversity.We prohibit discrimination against employees or