ICT Compliance Manager Outsourcing

at  Lloyds Bank GmbH

BECOME PART OF LLOYDS BANK GMBH!

We are a team of 50 different nationalities where colleagues and customers come first. Do you want to be part of our great team? Apply today!

YOUR KNOWLEDGE/EXPERIENCE

• Recognized Master degree in economics/ law or equivalent
• Profound knowledge of common standards and regulations (e.g. DORA, BAIT, MaRisk, Guidance on outsourcing to cloud service providers , ISO27XXX, ITIL)
• Strong knowledge of Digital Operational Resilience regulation specifically as it pertains to outsourcing
• In-depth understanding of vendor risk management practices and framework, especially in ICT outsourcing
• Good understanding of ICT infrastructure, including on premise basis and cloud – based systems
• Several years professional experience in a comparable risk/ compliance function within the financial industry or a related advisory or audit role
• Excellent experience of risk related regulatory requirements
• Good information analysis and interpretation skills
• Excellent communication skills both verbal and written in English and German (Dutch is a plus)

• Oversee and Monitor the ICT third party service providers in relation to DORA requirements chapter 5
• Report DORA Obligations and critical incidents according to § 24 No.19 KWG to Regulator
• Assess the ICT security posture and compliance of prospective third – party providers
• Collaboration with IT Teams and Information Security Officer in relation to ICT services maintenance
• Develop and maintain the IT outsourcing framework (policy, procedures and tools) ensuring the management of outsourcing and other acquisitions of goods and services are in compliance with applicable laws and regulations
• Conduct regular and ad hoc monitoring activities to achieve policy compliance
• Coordinate the outsourcing risk analyses
• Create and maintain full documentation of the bank’s outsourcings and ensure central oversight of the outsourcing portfolio against agreed contractual terms
• Report risks, issues and control weaknesses to the Management Board and write the annual outsourcing report pursuant to MaRisk
• Manage relationships and contact with internal and external auditors, regulators and investigating authorities
• Ensure appropriate exit planning is in place