Senior Consultant Outsourcing Management (m/f/d)

Company description

We're a pioneer in banking. Since 1974 we have been financing social-ecological projects and companies exclusively. We not only work in a sense-making way, but also transparently. As the only bank in Germany we disclose our credit list. We are a growing community that actively shapes the future. Here you can find out more about us!

The function ensures the regulatoryly compliant, transparent and risk-oriented control of all bank outsourcing and ICT services. It supports compliance with regulatory requirements (e.g. MaRisk, DORA) through structured risk analyses, controls and reporting and contributes to ensuring operational resilience. At the same time, it is responsible for identifying, evaluating and monitoring human rights risks along the value chain, making a significant contribution to governance, compliance and sustainable corporate governance. In this task you take over: You check and evaluate whether regulatory requirements, in particular from MaRisk, DORA, EBA guidelines and internal specifications, are complied with. You analyse and assess risks arising from outsourcing and the use of ICT third-party service providers. You accompany and challenge the First Line of Defense in risk analysis, control concepts and implementation of measures. You contribute to the further development of governance, control and reporting processes in the outsourcing and ICT third party management. You follow measures and findings from risk analyses, audits and internal controls and ensure their timely follow-up, documentation and completion. You support the Bank's human rights officer. You prepare meaningful management and supervisory reports (e.g. ICT outsourcing reports, status reports), deliver key figures and deriving recommendations for action and thus support the decision-making of the management.

Ideal for this position: You have a completed commercial training with 3–5 years of relevant professional experience. You have a secure understanding of relevant requirements (DORA, BAIT, MaRisk, EBA Guidelines) and can provide services correctly as outsourcing or Classify foreign assignment. You provide several years of experience in the risk assessment of ICT outsourcing as well as in the handling of central outsourcing registers, risk analyses and action tracking. You have a deep understanding of ICT services, information security, KPIs, SLAs and control actions; experience in assessing security incidents, disruptions and changes in ICT service providers and due diligence checks (ISAE 3402, SOC reports, certifications) and regulatory audit. You are able to identify, evaluate and document human and environmental risks and to derive and follow preventive and remedial measures. You analyze and structure complex information, proactively take the initiative to develop pragmatic solutions and create targeted, clear communication.

Apply! This position is dominated by an annual income of between 55,000 - 87,000 euros plus possible social and local supplements. You're not bringing anything up called? Don't worry. We are looking for people who want to move. You are still unsure and want to ask questions beforehand? Then contact us. Questions about the written position will be answered by Christian Krüger. You have a disability and want to get into the exchange? You can contact our severely disabled representative Sebastian Hagenkötter. He is also with counsel and deed. We value diversity and therefore expressly welcome all applications - regardless of gender, nationality, ethnic and social origin, religion/worldview, physical abilities, age as well as sexual orientation and identity. The body shall be occupied 01.10.2026. If you feel addressed and want to actively participate in the GLS community, we look forward to your application by 24.07.2026 to Christian Krüger and Lisa Wiezorrek via our GLS application portal.

Apply now