Specialist TPRM & Audit Office (m/f/d)

As part of DORA, we are expanding our Second Line of Defense and looking for you as a specialist (m⁠/⁠w⁠/⁠d) for managing third-party risks. At the same time, you take the central coordination of internal and external IT audits in the audit office and control the risk management of our outsourcing chain and regulatory reporting. Third Party Risk Management (TPRM) Operationalization: You translate regulatory requirements for controlling third-party risks into practical processes and develop appropriate frameworks and templates. Risk analyses: You carry out risk analyses for DORA-relevant outsourcing together with the disciplines and coordinate the resulting measures. Monitoring: You take risk-based monitoring tasks from service providers or evaluate external audit performances and ensure compliance with regulatory requirements. Documentation: You regularly update and update all relevant DORA documents (e.g. risk analysis, exit strategies). Reporting: You'll start consolidated reports on third party risks for internal and external stakeholders. Focus on exam office Governance: You are the central contact person for internal and external auditors (e.g. auditors, supervisory authorities) as part of special and annual audits. Coordination: You control the structured processing and provision of audit-relevant information and documents. Quality Assurance: You ensure that all evidence meets regulatory requirements and that continuous audit readiness is guaranteed. Action tracking: You monitor the implementation of measures from audit findings in the IT environment.

Qualification: You have a degree in economics, (economics) informatics, law or comparable training. Experience: You bring well-founded knowledge in third-party risk management as well as initial experience in provider management and IT audits (as a examiner or audited entity). Ideally, you have already worked with auditing companies and/or supervisory authorities. Expertise: You are safe in dealing with regulatory requirements (especially DORA, VAG, MaGo VA) and know their impact on the outsourcing control. Working: You work structured and analytical and can document complex issues precisely as well as audit-proof. Communication: You will perform professionally and professionally in exchange with departments, service providers and examiners.

Working hours: for full time 38 hours per week and sliding time during time recording Mobile work: 3 days a week and flexible working hours based on trust work time Holidays: 30 days, additional work-free days (24.12. and 31.12.) and up to 12 days of leisure Remuneration: collective agreement for private insurance and additional voluntary benefits Further development: Promoting personal development and continuing vocational training Health: occupational retirement and in-house fitness room with individual training offers Family & Occupation: Childcare Grant and Employee Support Program Mobility: free parking, easy access to the ÖPNV and bicycle leasing Food: Water, tea and coffee specialities Culture: community and great corporate events Dresscode: Business Casual – tie and dusty insurance was yesterday