Information Security Manager / IT Governance Specialist (m/f/d)

You work closely with the departments and accompany them in the implementation of regulatory requirements as part of introductions, changes and further development of IT applications. You actively participate in the development, development and quality assurance of our bank-wide information security management and support the implementation of regulatory requirements, in particular in the context of DORA and MaRisk. You analyze, evaluate and track ICT risks and guide appropriate risk mitigation and sustainable hedge accounting measures. You are responsible for the maintenance, further development and documentation of IT security guidelines, work instructions and regulatory requirements and ensure audit-proof verification. You control and coordinate central processes of operational information security, in particular in the fields of SIEM, vulnerability management, ICT setup management and change management. You identify optimization potentials from security reports, incidents, risk analysis and regulatory requirements and continuously develop existing security and governance processes. You'll start management reports, risk analysis, protection requirements assessments, internal and external audit documentation, and professionally accompany audits. You work closely with IT, specialist areas, information security, risk management and external service providers and ensure a transparent and reliable exchange of information. You design and accompany awareness-raising and training on information security and strengthen the security awareness within the bank.

You have completed a training as a banker, a banker or a banker, an economic science or IT-related studies are completed or have a comparable qualification. You have professional experience in the fields of information security, IT governance, IT risk management, IT compliance, IT revision or a comparable governance or interface function. You are delighted to translate regulatory requirements – for example DORA, MaRisk or ISO 27001 – into practical processes, controls and sustainable solutions. You bring a good understanding of IT and ICT processes and you can analyze and evaluate topics such as security incidents, vulnerability management, IT assets or changes in a structured manner. You recognize risks at an early stage, prioritize them appropriately and prepare complex issues for different stakeholders in a manner that is appropriate to the address. You work in a structured, carefully and document-proof manner and also keeps in mind audit, detection and compliance requirements. You communicate confidently and legally and safely in the interface of IT, specialist areas, information security and regulatory. You convince by organisational skills, self-initiative and a solution-oriented and responsible way of working.

A cooperatively organized special bank, which is characterised by value-oriented and forward-looking action and is recognized as a top company. A professional onboarding including an extensive incorporation phase. A modern, challenging, family-friendly and motivating working environment. Various benefits and measures for work-life balance, such as flexible working hours, mobile work, active operational health management, driving costs for local transport, bicycle leasing and family service. A fair remuneration according to the collective agreement of the cooperative banks as well as an occupational pension scheme, asset-effective benefits and special conditions in the context of account management, investment and financing. .