Das erwartet dich bei uns

• Berate Banken fachlich und prozessual bei der Einführung von Risikomanagement‑Softwarelösungen
• Wirke als Teil des Produktintegrationsteams bei der Einführung und Weiterentwicklung der msg‑Softwarelösungen in den Bereichen Risikomanagement, Controlling und Kalkulation.
• Übernimm Verantwortung für Analyse, Projektierung und fachliche Steuerung
• Baue deine fachliche und methodische Beratungskompetenz für innovative IT‑Trends mit msg‑Produktbezug gezielt weiter aus
• Eine vertrauensvolle und teamorientierte Arbeitsatmosphäre, flexible Arbeitszeiten und Home-Office-Möglichkeiten sowie individuelle Mentoring-Programme und engagierte Communities wie z.B. unser Frauennetzwerk

Das bringst du mit

• Mehrjährige Erfahrung in der Einführung oder Anwendung von Standardsoftware im Bankenumfeld, insbesondere in Banksteuerung, Risikomanagement oder Controlling
• Fundierte Kenntnisse bankfachlicher Prozesse und regulatorischer Anforderungen im Risikomanagement‑Umfeld
• Ausgeprägte analytische Fähigkeiten, konzeptionelles und prozessorientiertes Arbeiten sowie Moderations‑ und Kommunikationsstärke
• Sehr gutes oder gutes abgeschlossenes Studium mit wirtschaftlichem, bankfachlichem oder IT‑nahem Schwerpunkt oder eine vergleichbare Qualifikation mit einschlägiger Erfahrung
• Projektbedingte Reisebereitschaft sowie verhandlungssicher Deutsch- und Englischkenntnisse (jeweils mind. C1)

About this job

Senior Operational Risk Manager (m/f/d)

About Us:

Bouwfonds Immobilienentwicklung (BPD for short) is a Rabobank company and one of Europe's largest area and project developers. In Germany, our headquarters are in Frankfurt am Main, and we have offices in Hamburg, Berlin, Leipzig, Düsseldorf, Cologne, Stuttgart, Nuremberg, and Munich. Our focus is on the development and realization of residential construction projects.

Tasks:

• They identify, analyze, and monitor the company's operational risks and ensure their effective management to guarantee business continuity. They provide strategic advice to senior management and offer operational support by developing risk frameworks, conducting Risk and Safety Assessments (RCSAs), and reporting on incidents. They are responsible for conducting risk analyses, managing findings and actions, and creating and maintaining the risk register. They promote risk awareness among employees through training and presentations. They ensure compliance with all relevant laws and regulations in close coordination with the Compliance Team.
• Responsibility and design of operational risk management within the company, with a focus on:
• Framework Management (Implementation/Optimization)
• Risk reduction (event analysis/mitigation strategy)
• Reporting (governance structures/stakeholders)
• Assessment (RCSA/Monitoring of Risk Indicators)
• Mentoring (guidance/strengthening risk awareness)
• Collaboration (establishing a risk culture)
• Development of strategies and implementation of guidelines in coordination with local management and BPD Europe (Holding)
• Initiation and participation in the creation and execution of annual risk analyses
• Provision of reports on operational risks, in particular incident reports and business continuity and IT risks.
• Raising awareness throughout the entire organization regarding controlled and risk-aware corporate management and culture through consulting, presentations, and training.
• Regional contacts for all questions regarding Operational Risk Management
• Supporting regional and central management as well as the executive board in establishing an effective and efficient risk management system.

Qualifications:

• Degree in Business Administration with a focus on Finance and Internal Management or comparable qualification
• Relevant further training in the field of compliance or risk and integrity management
• At least seven years of relevant professional experience in a comparable position
• Deep understanding of regulatory requirements based on sound knowledge of relevant supervisory, legal and regulatory provisions.
• Knowledge of the real estate industry, especially in real estate development, is an advantage.
• Independent management of multidisciplinary projects
• Fluent in German and English, both spoken and written.
• Soft skills: Analytical thinking and sound judgment, as well as the ability to reconcile operational execution with a risk-oriented mindset; furthermore, strong communication skills, teamwork, flexibility, and a hands-on mentality.

We offer:

Who we are

With around 6,000 employees, the GMH Group is Germany's most climate-friendly steel company. By 2039, we will supply CO2-neutral steel to our customers, who primarily come from the mobility, energy, and mechanical engineering sectors.

We focus on collaborative partnerships with flexible structures, flat hierarchies, and a strong sense of team spirit.

As the IT service provider for the GMH Group, comprising 20 medium-sized production companies in the steel, forging and casting industries, employing around 6,000 experts, as well as other well-known customers outside the GMH Group, GMH Systems GmbH offers a broad service portfolio, including process consulting, IT solutions and infrastructure operation.

What we plan to do

• Further development and operation of the Information Security Management System (ISMS)
• Ensuring compliance with relevant laws, norms and standards in the context of information security or cybersecurity (e.g. BSI IT Baseline Protection, GDPR, NIS-2)
• Management of IT risk management (management of risk treatment, assessment of known risks, business impact analysis, etc.)
• Further development and maintenance of IT compliance documentation, e.g., guidelines and controls.
• Coordination of external IT audits of our group companies as well as independent execution of internal IT audits.
• Ensuring supply chain and third-party provider security: Evaluation of service providers and definition of contractual security requirements
• Anchoring awareness and training within the GMH Group (including phishing simulations, mandatory IT security training and internal communication)
• Market monitoring: new threat situations and regulatory developments (NIS-2, industry-specific requirements) and their translation into concrete measures
• Coordination and management of service providers and activities in the field of cybersecurity, information security and IT compliance within the company, in close coordination with the relevant departments and management.
• Close collaboration with the GMH Group's locations (IT, Management, HR, Audit) as well as with external partners (e.g., auditors, insurance companies, BSI)

Who we are looking for

• Completed studies with a focus on IT, computer science or information security, or comparable professional experience
• Several years of experience in cybersecurity and IT compliance, ideally in a manufacturing company
• Experience in setting up and operating an ISMS, ideally according to ISO/IEC 27001 (native) or ISO 27001 based