Digital Operational Resilience (DOR) Manager (m/f/d)

AND-E; Ismaning; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

32 days annual leave plus 2 days off

Flexible working hours

Home office policy

Employer subsidy for occupational and/

disability pension and health benefits

Zusammenfassung

AND-E in Germany seeks a senior ICT risk and DORA expert to drive regulatory resilience initiatives across IT, risk, and business units. You will own the DOR strategy, oversee the ICT Risk Management Framework, and act as a 2LoD advisory partner to first-line activities, ensuring evidence-based reporting to senior management.

Fluency in English and German, 4+ years in IT risk/audit, and financial services regulatory experience are required.

Qualifikationen

• Bachelor's or master's degree in engineering, IT, cybersecurity, risk management or related field.
• 4+ years of IT/Information Security audit, advisory or ICT risk management experience.
• Solid experience with DORA implementation, resilience, incident management or regulatory reporting.
• Strong understanding of internal controls and financial services regulatory frameworks.
• Ability to consolidate evidence and translate resilience topics into management reporting.

Aufgaben

• Maintain the DOR strategy, resilience objectives and CIF methodology, and steer DORA implementation by tracking regulatory requirements and compliance gaps.
• Oversee the ICT Risk Management Framework, including risk identification, assessment, monitoring and reporting processes.
• Act as 2LoD challenge/advisory function for first-line activities, reviewing risk assessments, control design and mitigation strategies.
• Integrate DOR functions across ICT risk management, business continuity, incident management, third-party risk and resilience testing, closing cross-functional process and ownership gaps.
• Monitor resilience framework effectiveness by consolidating findings from risk assessments, incidents, tests and BCM exercises.
• Coordinate classification of major ICT-related incidents and regulatory interactions, and consolidate evidence while tracking audits and findings.
• Prepare integrated DOR reporting for senior management and the Management Body, and promote ICT risk awareness and training across the organization.

Kenntnisse

IT/Information Security audit

ICT risk management

DORA implementation

Regulatory reporting

Stakeholder communication

English

German

Ausbildung

Bachelor's or Master's in engineering, IT, cybersecurity, risk management or related field

Certifications such as CISA, CISM, COBIT or CISSP are a plus

Jobbeschreibung

Are you passionate about driving DORA forward in our organization? For you, digital resilience is more than a checkbox - it's the foundation of trust, and you translate complex regulatory requirements into practical solutions first-line teams can use. You bring a solid grasp of internal controls within financial services.
Then welcome to AND-E.

Cultural Fit

Are you passionate about driving DORA forward in our organization? For you, digital resilience is more than a checkbox - it's the foundation of trust, and you translate complex regulatory requirements into practical solutions first-line teams can use. You bring a solid grasp of internal controls within financial services.
Then welcome to AND-E.

How you'll make an impact

• Maintain the DOR strategy, resilience objectives and Critical Important Functions (CIF) methodology, and steer DORA implementation by tracking regulatory requirements and compliance gaps.
• Oversee the ICT Risk Management Framework, including risk identification, assessment, monitoring and reporting processes.
• Act as 2LoD challenge/advisory function for first-line activities, reviewing risk assessments, control design and mitigation strategies.
• Integrate DOR functions across ICT risk management, business continuity, incident management, third-party risk and resilience testing, closing cross-functional process and ownership gaps.
• Monitor resilience framework effectiveness by consolidating findings from risk assessments, incidents, tests and BCM exercises.
• Coordinate classification of major ICT-related incidents and regulatory interactions, and consolidate evidence while tracking audits and findings.
• Prepare integrated DOR reporting for senior management and the Management Body, and promote ICT risk awareness and training across the organization.

What it takes to succeed in this role

• Bachelor's or master's degree in engineering, IT, Cybersecurity, Risk Management or a related field; certifications such as CISA, CISM, COBIT or CISSP are a plus.
• 4+ years of experience in IT/Information Security audit, advisory or ICT risk management.
• Solid experience with DORA implementation, operational resilience, incident management or regulatory reporting in financial services.
• Strong understanding of internal controls and financial services regulatory frameworks.
• Ability to consolidate evidence, identify gaps and translate technical resilience topics into management-ready reporting.
• Strong communication and negotiation skills, with the ability to work across 1st and 2nd Line stakeholders as well as regulators, in an international, multicultural environment.
• Professional English and German required; further languages are beneficial.

Why join us?

• Growth is important to us, that’s why we support your personal and professional development.
• A working environment based on trust, encouragement and constructive feedback.
• Collaboration with people from different countries and cultures.
• 32 days annual leave plus 2 days off.
• Flexible working hours and home office policy (approx. 60% possible).
• Attractive employee conditions for car insurance.
• Exceptional company benefits: Employer subsidy for occupational pension. scheme and disability pension, supplementary company health insurance, capital-forming benefits.
• Optional: Job ticket, car parking spaces, monthly travel allowance.
• EGYM Wellpass.
• Financial subsidy as a small wish-fulfiller.
• Free coffee, tea, water and weekly fruit delivery.
• Health management and pme family service.

About us

At AND-E, we're redefining the future of mobility insurance. As part of the global MS&AD Group and in close partnership with Toyota, we aim to make tomorrow's journeys simpler, safer, and smarter. Our expertise spans over 30 markets in Europe and South Africa, providing tailored insurance solutions for Toyota and Lexus customers and various white-label partners. In Germany, our offerings include motor insurance, commercial fleet coverage, payment protection insurance, and support for Japanese businesses operating abroad.

Our commitment extends beyond business: at AND-E we support our people to grow, make a difference for customers, and help shape the future of connected mobility protection.