Working Student (m/f/d) IT Governance, Risk and Compliance in Hamburg

HOYER GmbH
Hamburg

Code: YT-WS2026-05

Working Student (m/f/d) IT Governance, Risk and Compliance in Hamburg, 1. image

We are among the world's leading providers of logistics solutions for the chemical, mineral oil, gas, and food industries, based on our core competencies. As a family business, we stand behind each and every one of our 3,800 employees worldwide. Their skills, commitment, and expertise are the foundation that allows us to always go a step further and consistently deliver the best solutions to our customers. Make something special out of your skills too.

For the HOYER Group, we are looking for an Working student (m/f/d) IT Governance, Risk and Compliance in Hamburg, who is passionate about Information Security and interested in supporting governance, compliance, and security awareness activities within an international environment.

Your responsibilities

Support Information Security Governance, Risk and Compliance (GRC) activities, including the maintenance of security policies, standards, registers, controls, and the Statement of Applicability (SoA)
Coordinate audits, control reviews, evidence collection, compliance monitoring, management reporting, and continuous improvement initiatives
Administer and maintain governance, security awareness, and training platforms, including ZenGuide and related solutions, covering platform administration, content management, reporting, user support, and continuous improvement activities
Manage access, application, and supplier governance processes, including user lifecycle reviews, privileged access reviews, and the maintenance of relevant registers
Monitor regulatory, cybersecurity, and technology developments and support the implementation of related governance and compliance requirements
Coordinate with internal stakeholders, suppliers, and vendors to support security, compliance, issue resolution, and continuous improvement initiatives

Your skills

Currently studying Computer Science, Cyber Security, Law, Information Technology, or a related field
Genuine interest in Information Security, Governance, Risk & Compliance (GRC), and Cyber Security
Familiar with or interested in learning about the ISO 27001 framework
Detail-oriented, analytical, and structured way of working
Passion for policies, regulations, processes, and continuous learning
Good Microsoft Office skills; SharePoint knowledge is an advantage
Very good written and spoken English and German skills