ICT Governance and Compliance Specialist in the 2nd Line of Defense (m/f/d)

When it comes to creating a sustainable foundation, you are in the middle of it: you design the ICT governance framework and continuously develop it – always with a view to traceability, effectiveness and the relevant regulatory requirements such as DORA, MaRisk and the EBA guidelines. Strategy is more than a concept on paper for you: you actively drive forward the further development of the DORA and ICT DPR strategy and ensure that it is integrated into the overall strategy of the ISB. Cooperation does not end at your borders: In rounds of votes and committees you are actively involved and ensure that the ICT governance requirements are implemented consistently. If you have to look more closely, come to the game: You carry out ICT governance reviews, independently check compliance with requirements, analyze deviations and clearly show where action is needed. Making complex facts understandable? Your thing: You prepare management reports, KPI/KRI overviews and layer images for digital resilience so that You serve as a solid basis for decision. Examinations are not an exceptional state for you, but part of everyday life: You accompany internal and external audits sovereignly, coordinate measures and ensure that everything is properly documented. And if questions arise, you are an estimated respondent: You advise specialist areas around ICT governance and compliance and help sustainably anchor knowledge through training and awareness-raising.

Experience in a governance, compliance or risk management function of the 2nd Line of Defence, ideally in a regulated environment. Knowledge of regulatory requirements in the ICT environment, in particular DORA, MaRisk and relevant EBA guidelines. Expertise in the development, maintenance and quality assurance of ICT governance and ICT compliance frameworks. routine in the implementation of Gap analyses, assessments and in the address-oriented preparation of results for management and bodies. Experience in cooperation with internal and external audit bodies as well as audit-proof detection and documentation management. completed university studies of (economic) informatics, economic or legal sciences or comparable qualifications; relevant certifications (e.g. BSI GS practitioners, ISO/IEC 27001) are advantageous. Analytical strength, structured functioning as well as high communication and presentation capability at different hierarchical levels. This is important You don't have to master every topic perfectly. It is important to us that you are curious, want to take responsibility and want to develop professionally.

What you should know We are not a bank with rigid rules and formal dress code. We focus on your results and your commitment. You provide your performance in an environment that is open, innovative and human. We believe in work-life balance because good ideas only arise when profession and private life are in line. And the best thing: your workplace with us is safe – you can build on us in the long term! You can look forward to this You love flexibility? With us you decide when between 6 am and 8 pm Your working day begins. And mobile work? Of course – once you've worked in, we'll see where you're most productive. Free time is important: 30 days vacation plus two additional days on fast night as well as Christmas Eve and New Year's Eve are just among us. And because mobility is individual, choose: grant to the Deutschlandticket or the car park – just as it fits you. Family? We have a look. With our “Main Carnations” your children are well looked after during the holidays or in an emergency. We ensure your future together: with a collective pension and a wealth-effective service. Your health is also at our heart – from company precautions to sports activities such as Urban Sports Club or race groups. And further education? We decide together what you need so that you can expand your strengths. .