IT-Risk & Governance Officer (m/f/d)

Group-wide coordination of regulatory, audit-relevant and risk-oriented requirements in the IT context Strategic and conceptual participation in the orientation of IT security and regulatory requirements Analysis and structured conceptual implementation of regulatory requirements as well as preparation of trends with the perspective Business versus Security Creation of opinions and decision-making documents for management with a view to feasibility, governance and international requirements Active support for the taxability of IT, the creation of transparency on regulatory obligations and the support of change projects with strategic vision Structural interface between IT, departments, 2nd Line, revision and supervision with high impact up to the board level

Complete studies (e.g. business informatics, computer science, economic/legal science with IT reference) or comparable qualification with relevant further education in the IT risk environment Insufficient professional experience of usually 3-5 years in dealing with regulatory IT requirements (e.g., MaRisk, DORA, EBA/ECB requirements) and proven involvement in audits (e.g. internal audit, audit, supervision) or IT regulatory projects Good knowledge of security frameworks such as NIST 2.0, Cobit, ISO 27001 In-depth knowledge of IT risk management, IT governance and IT security principles as well as experience in structured analysis and derivation of implementation needs from regulatory requirements Experience in the creation and preparation of management or supervisory templates (e.g. forum documents, decision templates, reporting), including address-oriented presentation of complex issues proven ability to coordinate professional coordination with several stakeholders (e.g. IT, departments, 2nd Line, revision, foreign offices), ideally also at group level; Project experience in the form of the management of subprojects in the IT or regulatory environment Embossed solution-oriented and networked thinking, safe and professional appearance in committee and interface work - also in the international context - as well as ability to identify the needs of internal customers with regard to regulatory and operational requirements and to translate them into practical solutions German and English language skills in word and writing

Modern talent management for career development Active promotion of a good reconciliation of work and private life (including flexible working hours, sabbaticals and the possibility to work in part on a mobile or home office) Attractive occupational pensions Comprehensive health management (e.g. cooperation with gyms, occupational medical service, preventive examinations) Interesting leasing possibilities, e.g. Job-Rad, Tablet, Smartphone Great lunch offers (bio, vegetarian or vegan) Several daycare centres