Overview
As IT Compliance Expert DORA (m/f/d), you take on a key role in ensuring the digital resilience of FD GmbH, working closely with internal departments and external stakeholders. Your responsibilities include monitoring and implementing the requirements of the Digital Operational Resilience Act (DORA), particularly in the areas of ICT risk management, information security, incident reporting, and vendor management.
Your Tasks
•Development and implementation of policies
•Advising business departments on regulatory requirements
•Conducting compliance gap analyses and deriving corresponding measures
•Steering the implementation of requirements across the individual DORA pillars
•Conducting risk analyses and supporting regulatory reviews and audits (internal and external)
•Steering and tracking compliance measures and action plans
•Coordination and reporting to the 2nd Line of Defense (risk management, etc.)
•Training employees and reporting to management
What You Should Bring
•More than five years of experience in information security and ICT risk management, ideally in the financial sector
•Solid knowledge of DORA regulatory requirements
•Knowledge of relevant regulatory standards such as ISO 27001, NIST, and COBIT
•Knowledge of third-party risk management and ICT risk management
•Analytical and structured skills along with a proactive, independent way of working
•Strong communication and cooperation skills in dealing with authorities and internal committees
•High self-initiative and assertiveness
Nice to Have
•Knowledge in the area of third-party providers (outsourcing and other external procurement)
•Understanding of modern IT landscapes and experience with IT projects
•Experience dealing with regulatory reviews and audits in the financial environment
What We Offer
•Flexible working hours within a flextime arrangement
•The possibility to work up to 15 working days per year from abroad in numerous countries
•30 days of vacation per year
•Attractive additional benefits such as company pension scheme, employee stock purchase programs, and mobility offers
•Individual training and development opportunities
•Corporate benefits and much more
