IT Risk Officer

Company Description

Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic, and labelling is accurate.

Eurofins is dedicated to delivering testing services that contribute to the health and safety of society and the planet, and to its corporate responsibility to protect the environment and ensure diversity, equity, and inclusion across the entire network of Eurofins companies.

Job Description

As a Senior IT Risk Officer, you will play a key role in identifying, assessing and reducing IT and cybersecurity risks across Eurofins' European businesses.

You will independently perform IT risk assessments across laboratories, business units and IT environments, working closely with IT, security and business teams.

This role requires a solid technical understanding of IT infrastructure and cybersecurity, combined with strong risk assessment, communication and stakeholder management skills.

In addition to IT risk assessments, you will contribute to broader security and resilience initiatives, including phishing campaigns and IT resilience exercises.

The position requires frequent travel across Europe, approximately 35–50% of the time.

Your main responsibilities will include:

• Independently planning and conducting IT and cybersecurity risk assessments across laboratories, regional infrastructure and central IT services.
• Assessing technical and organizational controls covering areas such as network security, identity and access management, endpoint security, vulnerability management, cloud, logging and monitoring, backup and IT resilience.
• Identifying technical weaknesses and evaluating their potential impact on business operations.
• Challenging existing technical implementations and security controls where necessary.
• Translating technical findings into clear business risks and pragmatic recommendations.
• Producing high-quality reports and presenting assessment results to technical teams and management.
• Following up on agreed remediation actions and evaluating whether identified risks have been adequately addressed.
• Contributing to the continuous improvement of IT risk assessment methodologies.