Digital Operational Resilience (DOR) Manager (m/f/d)

Aioi Nissay Dowa Europe; Deutschland; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Occupational pension subsidy

Disability pension

Company health insurance

Monthly travel allowance

Job ticket

EGYM Wellpass

Free coffee, tea, water and weekly水果

Zusammenfassung

AND-E is seeking a Digital Operational Resilience (DOR) Manager to drive DORA across the organization. You will translate regulatory requirements into practical solutions for first-line teams and coordinate across ICT risk management, continuity and incident response.

This role requires 4+ years in IT/security risk, strong communication, and fluency in English and German. Join a global mobility protection leader with a focus on sustainable, customer-centric resilience.

Qualifikationen

• Bachelor’s or master’s degree in engineering, IT, cybersecurity, risk management or related field.
• 4+ years of IT/security audit, advisory or ICT risk management experience.
• Solid experience with DORA, resilience, incident management or regulatory reporting in financial services.
• Strong ability to consolidate evidence and report to management.
• Fluent English and German; international collaboration.

Aufgaben

• Maintain the DOR strategy, resilience objectives and CIF methodology; steer DORA implementation by tracking regulatory requirements and gaps.
• Oversee the ICT Risk Management Framework, including risk identification, assessment, monitoring and reporting processes.
• Act as 2LoD advisory function for first-line activities, reviewing risk assessments, control design and mitigation strategies.
• Integrate DOR functions across ICT risk management, business continuity, incident management, third‑party risk and resilience testing, closing cross-functional process and ownership gaps.
• Monitor resilience framework effectiveness by consolidating findings from risk assessments, incidents, tests and BCM exercises.
• Coordinate classification of major ICT-related incidents and regulatory interactions, and consolidate evidence while tracking audits and findings.
• Prepare integrated DOR reporting for senior management and promote ICT risk awareness and training across the organization.

Kenntnisse

IT/Information Security audit

ICT risk management

DORA implementation

Regulatory reporting

Communication skills

English & German proficiency

Ausbildung

Bachelor's or Master’s degree in related field

Jobbeschreibung

Digital Operational Resilience (DOR) Manager (m/f/d)

Are you passionate about driving DORA forward in our organization? For you, digital resilience is more than a checkbox — it’s the foundation of trust, and you translate complex regulatory requirements into practical solutions first-line teams can use.
Then welcome to AND-E.

How you'll make an impact

• Maintain the DOR strategy, resilience objectives and Critical Important Functions (CIF) methodology, and steer DORA implementation by tracking regulatory requirements and compliance gaps.
• Oversee the ICT Risk Management Framework, including risk identification, assessment, monitoring and reporting processes.
• Act as 2LoD challenge/advisory function for first-line activities, reviewing risk assessments, control design and mitigation strategies.
• Integrate DOR functions across ICT risk management, business continuity, incident management, third-party risk and resilience testing, closing cross-functional process and ownership gaps.
• Monitor resilience framework effectiveness by consolidating findings from risk assessments, incidents, tests and BCM exercises.
• Coordinate classification of major ICT-related incidents and regulatory interactions, and consolidate evidence while tracking audits and findings.
• Prepare integrated DOR reporting for senior management and the Management Body, and promote ICT risk awareness and training across the organization.

What it takes to succeed in this role

• Bachelor’s or master’s degree in engineering, IT, Cybersecurity, Risk Management or a related field; certifications such as CISA, CISM, COBIT or CISSP are a plus.
• 4+ years of experience in IT/Information Security audit, advisory or ICT risk management.
• Solid experience with DORA implementation, operational resilience, incident management or regulatory reporting in financial services.
• Strong understanding of internal controls and financial services regulatory frameworks.
• Ability to consolidate evidence, identify gaps and translate technical resilience topics into management-ready reporting.
• Strong communication and negotiation skills, with the ability to work across 1st and 2nd Line stakeholders as well as regulators, in an international, multicultural environment.
• Professional English and German required; further languages are beneficial.
• Growth is important to us, that’s why we support your personal and professional development.
• A working environment based on trust, encouragement and constructive feedback.
• Collaboration with people from different countries and cultures.
• 32 days annual leave plus 2 days off.
• Flexible working hours and home office policy (approx. 60% possible).
• Attractive employee conditions for car insurance.
• Exceptional company benefits: Employer subsidy for occupational pension. scheme and disability pension, supplementary company health insurance, capital-forming benefits.
• Optional: Job ticket, car parking spaces, monthly travel allowance.
• EGYM Wellpass.
• Financial subsidy as a small wish-fulfiller.
• Free coffee, tea, water and weekly fruit delivery.
• Health management and pme family service.

At AND-E, we're redefining the future of mobility insurance. As part of the global MS&AD Group and in close partnership with Toyota, we aim to make tomorrow's journeys simpler, safer, and smarter. Our expertise spans over 30 markets in Europe and South Africa, providing tailored insurance solutions for Toyota and Lexus customers and various white-label partners. In Germany, our offerings include motor insurance, commercial fleet coverage, payment protection insurance, and support for Japanese businesses operating abroad.
Our commitment extends beyond business: at AND-E we support our people to grow, make a difference for customers, and help shape the future of connected mobility protection.