Information Technology Governance Manager

Barclay Simpson; Stuttgart; Vor Ort; EUR 60.000 - 100.000; Vollzeit

Zusammenfassung

An established industry player is seeking a dedicated professional to lead IT governance and risk management efforts. In this pivotal role, you will act as a trusted advisor, ensuring compliance with German regulations and security frameworks. Your expertise in ISO 27001, COBIT, and GDPR will be critical as you develop a comprehensive governance framework and engage with auditors and regulators. This position offers the chance to make a significant impact within a dynamic environment, driving operational excellence and security assurance. If you are passionate about IT governance and thrive in challenging settings, this opportunity is perfect for you.

Qualifikationen

• 3+ years in IT governance, risk management, or IT audit in insurance or financial services.
• Deep knowledge of German regulations like BaFin, VAIT, MaRisk, GDPR.

Aufgaben

• Develop and maintain IT governance framework aligned with ISO 27001 and COBIT.
• Conduct ITGC risk assessments and oversee control design.

Kenntnisse

IT Governance

Risk Management

IT Audit

ISO 27001

COBIT

GDPR Compliance

German Regulatory Knowledge

Control Assurance

Ausbildung

Bachelor's Degree in IT or related field

Professional Certifications (CISA, CRISC)

Jobbeschreibung

In this high-impact role, you will take ownership of the 1.5 line of defense , serving as a trusted advisor between operational IT, information security, and enterprise risk. You’ll report directly to the Head of Security and the CIO , ensuring that our IT governance strategy aligns with internal controls, German regulations, and security frameworks.

You’ll focus on :

• Implementing and evolving ISMS (ISO / IEC 27001) for secure operations
• Driving COBIT-based IT governance frameworks
• Ensuring robust and effective IT General Controls (ITGC)
• Meeting compliance standards across BaFin , VAIT , MaRisk , and GDPR

Key Responsibilities :

• Develop and maintain a comprehensive IT governance framework aligned with ISO 27001, COBIT, and German insurance regulation
• Conduct ITGC risk assessments, control design, and remediation oversight
• Act as a key interface with auditors and regulators, including preparation for BaFin reviews
• Define and deliver risk and compliance reporting to senior management and board committees
• Champion the 1.5 line of defense , driving control assurance and bridging first and second lines
• Guide teams in aligning IT processes with MaRisk , VAIT , and GDPR expectations

Your Profile :

• 3+ years of experience in IT governance, risk management, or IT audit ideally in the insurance or financial services sector
• Deep knowledge of German regulatory requirements ( BaFin , VAIT , MaRisk , GDPR )
• Strong experience with ISMS (ISO 27001) , COBIT , and ITGC frameworks
• Skilled in navigating complex audit and assurance environments
• Professional certifications such as CISA , CRISC , CGEIT , or ISO 27001 Lead Auditor are highly desirable
• Fluent in German (C1 / C2) and English