Job
- Level
- Experienced
- Location
- Ismaning
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will develop governance processes and manage risk assessments while ensuring compliance with DORA and ISO 27001. You will handle audits and prepare governance reports for management.
Job Technologies
Your role in the team
- Strengthen and continuously improve AND-E's IT Governance, Risk & Compliance (GRC) framework across Europe.
- Coordinate and maintain governance processes, policies, standards, and procedures to ensure compliance with internal and external requirements.
- Perform IT and cyber risk assessments and maintain the IT Risk Register.
- Führen Sie die Umsetzung des ICT Risk Management Frameworks gemäß DORA, ISO 27001 und bewährten Branchenpraktiken.
- Coordinate IT control testing, assurance activities, and evidence collection, and support internal/external audits and remediation efforts.
- Prepare governance reporting, KPIs, KRIs, and presentations for senior management and governance committees.
This text has been machine translated. Show original
Our expectations of you
Education
- University degree in Information Security, IT, Risk Management, Business Administration, or a comparable field.
Qualifications
- Solid understanding of governance frameworks and industry standards such as DORA, ISO 27001, COBIT, NIST, and ITIL.
- Strong stakeholder management and communication skills, with the ability to work independently across international teams.
- Fluent English required; German language skills are an advantage.
Experience
- Several years of professional experience in IT Governance, IT Risk Management, Information Security, IT Compliance, or IT Audit.
- Practical experience conducting IT risk assessments and maintaining risk registers, as well as coordinating internal and external audits.
This text has been machine translated. Show original
What we offer
- Growth is important to us, that's why we support your personal and professional development.
- A working environment based on trust, encouragement and constructive feedback.
- Collaboration with people from different countries and cultures.
- 32 days of annual leave plus 2 days off.
- Flexible working hours and home office policy (approx. 60% possible).
- Attraktive Mitarbeiterkonditionen für die Kfz-Versicherung.
- Exceptional company benefits: Employer subsidy for occupational pension scheme and disability pension, supplementary company health insurance, capital-forming benefits.
- Optional: Job ticket, parking spaces, monthly travel allowance.
- EGYM Wellpass.
- Financial subsidy as a small wish-fulfiller.
- Free coffee, tea, water and weekly fruit delivery.
- Health management and PME family service.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
AND-E
AND-E is an innovative insurance company headquartered in Ismaning near Munich. As part of the MS&AD Group Holding, it ranks among the largest insurance groups in the world and employs 250 staff in Germany. The company is recognized as one of the leading telematics providers in Europe and collaborates closely with the Toyota and Lexus organization.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Banking, Finance, Insurance
IT GRC Specialist
- Location
- Ismaning
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
