IT Compliance Expert (m/f/d)

In the integration model, the University Medicine Göttingen (UMG) combines the Medical Faculty of the Georg-August University and the University Hospital under one roof. With around 9,700 employees, the UMG, together with its subsidiaries, is one of the largest employers in the region. Our clinics and institutes stand for high-quality patient care, excellent research, modern teaching and innovative technology transfer.

Göttingen as a city of science is located in the center of Germany and university medicine is integrated into an attractive network of university and non-university science institutions. G3-7 Information Technology of Universitätsmedizin Göttingen is looking for the earliest possible date: IT-Compliance-Expert (w/m/d) Full time, 38.5 hours per week, limited to 31.10.2027 The IT Compliance Expert (m/w/d) ensures that all IT systems, processes and projects of the organisation meet all relevant, regulatory, normative and internal compliance requirements, in particular in the areas of data protection, IT security and quality assurance in coordination with the comprehensive clinical risk management. Monitoring and further development of the IT compliance strategy in coordination with the IT and relevant departments

Analysis and evaluation of IT systems and IT projects with a view to their compliance with legal and regulatory requirements, e.g. GDPR, NIS-2 Implementation Act, industry-specific requirements

Organisation and support of internal and external compliance audits as well as follow-up and implementation of the resulting measures together with the delegates of the UMG

Detection and assessment of IT compliance risks including proposal and monitoring of risk mitigation measures

Advising departments and project teams (e.g. when introducing new software or systems) with regard to compliance with IT compliance

Implementation and/or coordination of training to promote compliance awareness among employees - documentation, analysis and processing of IT compliance incidents and violations in cooperation with relevant bodies (e.g. data protection officer, information security officer)

You have a completed academic degree (e.g. Master, Diploma) with a focus on computer science, business informatics, mathematics, law or comparable

You have proven to have deeper knowledge in the (IT) project management in the hospital sector. This is an indispensable prerequisite.

You have further knowledge of the regulations and standards relevant to hospital IT (GDPR, SGB-V, KRITIS, ISO 27001, EU-MDR, ISO 9001) - you have proven experience and knowledge in data protection and IT security issues

• You have very good German knowledge in word and writing, at least language level C1.

Your structured and independent work will allow you to work successfully in our team.

Enforcement, an analytical way of thinking, good communication skills and a pronounced customer orientation are prerequisites.

work in a motivated team with slender processes, flat hierarchy in a working atmosphere characterized by collegiality and appreciation.

performance-oriented remuneration according to TV-L.

all social benefits of the public service and an additional employer-funded occupational pension scheme.

an individual design of private and professional life with the possibility of flexible working time design.

Offers for further education and health promotion.

extensive shopping discounts for many brands and products and offers to employee rebates.

Our goal as a university medicine Göttingen is the professional equality of all sexes. We aim to harmonise gender relations in areas where there is an underrepresentation. The University Medicine Göttingen is particularly committed to the professional participation of seriously handicapped people and therefore welcomes applications of seriously handicapped people. In the case of the same suitability, applications of disabled persons are preferably taken into account in accordance with the relevant regulations. We ask you to provide a disability/equipment to safeguard your interests in the application letter. .