Job
In this role, you will develop governance processes and manage risk assessments while ensuring compliance with DORA and ISO 27001. You will handle audits and prepare governance reports for management.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Strengthen and continuously improve AND-E's IT Governance, Risk & Compliance (GRC) framework across Europe.
- Coordinate and maintain governance processes, policies, standards, and procedures to ensure compliance with internal and external requirements.
- Perform IT and cyber risk assessments and maintain the IT Risk Register.
- Führen Sie die Umsetzung des ICT Risk Management Frameworks gemäß DORA, ISO 27001 und bewährten Branchenpraktiken.
- Coordinate IT control testing, assurance activities, and evidence collection, and support internal/external audits and remediation efforts.
- Prepare governance reporting, KPIs, KRIs, and presentations for senior management and governance committees.
Our expectations of you
Education
- University degree in Information Security, IT, Risk Management, Business Administration, or a comparable field.
Qualifications
- Solid understanding of governance frameworks and industry standards such as DORA, ISO 27001, COBIT, NIST, and ITIL.
- Strong stakeholder management and communication skills, with the ability to work independently across international teams.
- Fluent English required; German language skills are an advantage.
Experience
- Several years of professional experience in IT Governance, IT Risk Management, Information Security, IT Compliance, or IT Audit.
- Practical experience conducting IT risk assessments and maintaining risk registers, as well as coordinating internal and external audits.
What we offer
- Growth is important to us, that's why we support your personal and professional development.
- A working environment based on trust, encouragement and constructive feedback.
- Collaboration with people from different countries and cultures.
- 32 days of annual leave plus 2 days off.
- Flexible working hours and home office policy (approx. 60% possible).
- Attraktive Mitarbeiterkonditionen für die Kfz-Versicherung.
- Exceptional company benefits: Employer subsidy for occupational pension scheme and disability pension, supplementary company health insurance, capital-forming benefits.
- Optional: Job ticket, parking spaces, monthly travel allowance.
- EGYM Wellpass.
- Financial subsidy as a small wish-fulfiller.
- Free coffee, tea, water and weekly fruit delivery.
- Health management and PME family service.
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
AND-E is an innovative insurance company headquartered in Ismaning near Munich. As part of the MS&AD Group Holding, it ranks among the largest insurance groups in the world and employs 250 staff in Germany. The company is recognized as one of the leading telematics providers in Europe and collaborates closely with the Toyota and Lexus organization.
- Established Company
- Onsite, Hybrid
- Banking, Finance, Insurance
More jobs
These jobs might also interest you
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
