Full job description

Permanent position | Full-time | Hybrid | Remote | Pulsnitz

Actively shape the further development of our ICT risk management and outsourcing management and create the basis for transparent risks, secure service provider management and digital operational resilience.

Tasks

• They manage ICT risk management and outsourcing management in accordance with DORA, ZAG and BaFin requirements.
• They assess ICT risks, ICT third-party risks, and outsourcing in a risk-oriented manner.
• They coordinate risk analyses, protection needs assessments, control assessments and risk treatment measures.
• They assess service provider risks, exit capability, emergency preparedness, and business continuity requirements.
• They support examinations, audits and regulatory inquiries with audit-proof evidence.
• They assess ICT incidents, business continuity requirements, and resilience tests from a risk perspective.
• They create reports and decision-making templates for specialist departments, control functions, committees and management.

qualification

• They bring sound experience in ICT risk management, outsourcing management, risk management, compliance, information security or IT governance.
• They are familiar with regulatory requirements such as DORA, ZAG, EBA guidelines, BaFin regulations and data protection requirements.
• They understand IT processes, information security, business continuity, incident management, and digital operational resilience.
• They assess risks in a structured manner and translate regulatory requirements into practical processes, controls, and decision templates.
• Ideally, you should be proficient in using Jira, Jira Service Management, Confluence, or similar collaboration and ticketing systems.
• They have fluent German skills and very good English skills.
  •