Job
- Level
- Experienced
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Munich, Wuppertal, Halle, Kiel, Mainz, Bonn
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you analyze legal requirements and develop recommendations for savings banks to ensure compliance in information security and to support their implementation.
Job Technologies
Your role in the team
- As a Compliance Analyst, you will be responsible for the methodological development and formulation of key recommendations and implementation aids for savings banks in one of the areas of information security, business continuity management, data protection, or operational information security.
- You are familiar with the requirements of a compliance organization (3-lines model) and support Sparkassen as the primary methodological contact in ensuring compliance with legal and regulatory requirements in selected areas.
- In your role, you will oversee the methodological orientation, taking into account the strategic impulses within the Sparkassen-Finanzgruppe.
- In doing so, you analyze relevant legal and regulatory requirements, as well as established norms and standards, and develop recommendations for action and implementation aids for savings banks to ensure and comply with compliance requirements.
- In collaboration with Sparkassen and other stakeholders, you monitor the implementation of the developed recommendations and implementation aids, ensuring continuous improvement.
- In addition, you are the point of contact for external inquiries regarding compliance topics and support the management level of SIZ in the regular reporting to the relevant committees within the Sparkassen-Finanzgruppe.
- Design and implementation of methods and standards within the control framework to meet legal and regulatory requirements, as well as standards.
- Participation in the requirements and release management process to provide technical and functional implementation support.
- Independent support in technical, professional, and cross-sectional topics within the scope of the steering field.
- Support in 2nd Level Support.
- Participation in methodological working groups and internal projects.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree (Business Informatics, Business Administration, Law) or a comparable qualification - professional experience can substitute this requirement.
Qualifications
- In-depth knowledge of banking-specific regulations, particularly ISO 27001, MaRisk, and DORA.
- Basic understanding of security architectures, data protection (GDPR), and vulnerability identification.
- Understanding of banking processes or PPS.
- Ability to assess complex technical risks and translate them into business impacts.
- Confident interaction with various stakeholders, from IT to management.
- High attention to detail in documentation and compliance with regulatory requirements.
- Certificates such as CISA, CISSP, or specific ISO 27001 certifications are advantageous.
- Negotiation-level German and comprehending English.
Experience
- Experience in assessing ICT risks, conducting protection needs analyses, and defining control measures, as well as specifying technical and organizational measures, providing recommendations for action, and implementing steering and control measures.
- Experience in supporting internal and external audits as well as reviewing security policies.
- Experience with the common GRC tools of the Sparkassen-Finanzgruppe.
This text has been machine translated. Show original
What we offer
- A secure and future-oriented employment with one of the leading service providers of the Sparkassen-Finanzgruppe.
- An interesting and challenging role in a team of experts.
- Work-life balance through flexible working hours, part-time models, home office options, support through special leave for caregiving and childcare issues, as well as additional days off (December 24th and December 31st).
- An attractive compensation package complemented by company pension scheme, kindergarten subsidy, monthly voucher for various providers, performance-based bonus, and health promotion activities such as online Business Yoga, screen glasses, and JobRad.
This text has been machine translated. Show original
Benefits
Health, Fitness & Fun
Work-Life-Integration
Topics that you deal with on the job
Job Locations
This is your employer
Siz Service Gmbh
Wir setzen Maßstäbe für zukunftsfähige IT- und Sicherheitsstandards sowie für das Beauftragtenwesen innerhalb der deutschen Finanzwirtschaft und darüber hinaus. Unser Angebot reicht von komplexen IT-Lösungen über individuelle Beratung und Unterstützung bis hin zum Outsourcing im Beauftragtenwesen.
Description
- Company Size
- 50-249 Employees
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Compliance Analyst Information Security
- Location
- Munich, Wuppertal, Halle, Kiel, Mainz, Bonn
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
