Purpose of the function:

This function is responsible for the management and monitoring of IT service providers, the management of information and communication technology risks, and compliance with regulatory requirements for the Berolina pension fund and Procepta Service GmbH. It also assumes the function of risk management for information and communication technology in accordance with the requirements of digital operational resilience in the financial sector.

THESE WILL BE YOUR MAIN TASKS

• Responsibility for information and communication technology risk management, information security and compliance.
• Further development and implementation of guidelines, processes and control measures.
• Identification, assessment and monitoring of risks, and support for corporate management.
• Management of external service providers and support during audits, assessments and regulatory reviews.
• Consulting for specialist departments and projects, as well as conducting training courses and awareness-raising measures.
• Reporting to management and supervisory bodies.

REQUIRED QUALIFICATIONS

• Successfully completed studies in business administration, economics, business informatics or a comparable field.
• Experience in information security, risk or compliance management
• Knowledge of relevant regulatory requirements and standards, in particular the regulation on digital operational resilience in the financial sector, IT baseline protection and ideally ISO 27001 or COBIT.
• Analytical strength and experience in dealing with risks, controls and data analysis.
• Basic knowledge of data protection
• Independent and structured work style as well as strong communication skills
• Excellent German and English skills, both spoken and written.

DESIRABLE QUALIFICATIONS

• Responsibility for information and communication technology risk management, information security and compliance.
• Further development and implementation of guidelines, processes and control measures.
• Identification, assessment and monitoring of risks, and support for corporate management.
• Management of external service providers and support during audits, assessments and regulatory reviews.
• Consulting for specialist departments and projects, as well as conducting training courses and awareness-raising measures.
• Reporting to management and supervisory bodies.