Head of Internal Audit, Risk & Compliance (m/f/d)

q.beyond AG; Oberhausen; Hybrid; EUR 90.000 - 120.000; Vollzeit

Benefits dieser Stelle

Work-life balance

30 Tage Urlaub

Private Unfallversicherung

Betriebliche Altersvorsorge

JobRad

Weiterbildungsmöglichkeiten (Udemy, Ld

SAP Learning Hub

Baby-Bonus

Hund im Büro

Zusammenfassung

q.beyond AG sucht eine erfahrene Führungskraft für Internal Audit, Risk & Compliance an einem der Standorte Augsburg, Darmstadt, Hamburg, Köln, Leipzig, Oberhausen oder Ulm. Sie berichten direkt an den Vorstand und gestalten den Rahmen für interne Kontrollen, Prüfungshandlungen und das Group-Wide Risk Management.

Zu Ihren Aufgaben gehören Planung, Durchführung und Dokumentation von Audits, Bewertung von Governance und Kontrollen, sowie die Weiterentwicklung des Compliance-Systems, Datenschutzes

Qualifikationen

• Abgeschlossenes Studium in BWL, VWL oder Rechtswissenschaften.
• Mehrjährige internationale Erfahrung in Internal Audit, Risikomanagement oder Compliance, ideal in leitender Rolle.
• Grundlegende Kenntnisse der Global Internal Audit Standards und der Prinzipien einer unabhängigen Internal-Audit-Funktion.
• Verständnis von Governance, Risiko-Management, Compliance und internen Kontrollen.
• Ausgeprägte Fähigkeiten in Risikoanalyse, Ursachenforschung und praktikablen Empfehlungen.
• Nachweisliche Erfahrung in Implementierung und Steuerung von Risikomanagement-Systemen.
• Umfangreiche Kenntnisse relevanter Standards/Frameworks (ISO27001, ISO22301, ISO9001, ISAE3402).
• Offene, moderne Tools inkl. KI-Anwendungen; neutrales Abwägen von Chancen/Risiken.

Aufgaben

• Planung, Durchführung und Dokumentation von Audits von Prozessen, Kontrollen und ICS.
• Bewertung der Wirksamkeit von Governance-, Risiko- und Kontrollprozessen.
• Auditberichte mit klaren Findings und Empfehlungen erstellen.
• Nachverfolgung der Implementierung von Maßnahmen und Berichterstattung an Geschäftsführung.
• Management des gruppenweiten Risikomanagements; Koordination von Maßnahmen.
• Regelmäßige Berichte an Vorstand/Aufsichtsrat zu Chancen/Risiken.
• Sicherstellung des Datenschutzes in Zusammenarbeit mit dem externen Datenschutzbeauftragten.
• Weiterentwicklung des Compliance-Management-Systems und Unterstützung externer Audits.
• Schnittstelle zu IT-Sicherheit, BCM und QM gemäß ISO-Normen.

Kenntnisse

Risikomanagement

Governance & Compliance

Risikobewertung

Kommunikationsfähigkeiten

ISMS-Kenntnisse

Ausbildung

Abgeschlossenes Studium in BWL/VWL oder Rechtswissenschaften

Tools

GRC-Systeme

ISO 27001/22301 Kenntnisse

Jobbeschreibung

JOIN FORCES. MAKE DIGITALIZATION HAPPEN.

q.beyond is the leading IT partner for SMEs. We solve the technological challenges our European customers face and make their business models fit for the future. This way, we sustainably enhance our customers’ business value. We do so by implementing sovereign IT solutions and drawing on our proprietary, certified AI data centres.

Our strong team of more than 1,000 specialists combines sector expertise with technical excellence. Core focuses of our activities include public and private clouds, operating business-critical applications based on Microsoft and SAP technologies, artificial intelligence, and IT security. Publicly listed, q.beyond is present across Germany and has locations in Latvia, Spain, Romania, India, and the USA.

Design future-proof IT solutions with us as Head of Internal Audit, Risk & Compliance (m/f/d) at one of our locations:

• Augsburg
• Darmstadt
• Hamburg
• Cologne
• Leipzig
• Oberhausen
• Ulm

YOUR TASKS:

Internal Audit

• Responsible for planning, conducting and documenting audits of processes, controls, compliance requirements and the Internal Control System (ICS).
• Assessing the effectiveness and adequacy of governance, risk management and control processes.
• Preparing audit reports with clear findings and practical recommendations for improvement.
• Following up on the implementation of corrective measures and regularly reporting to executive management and supervisory bodies.

Group-Wide Risk Management (Section 91 of the German Stock Corporation Act – AktG):

• Independently managing, coordinating and continuously developing the Group-wide risk management system.
• Identifying, assessing and monitoring material risks, as well as developing and tracking measures to mitigate or prevent them.
• Regularly reporting to the Executive Board, executive management and Supervisory Board on the Group’s opportunities and risk exposure, including anticipated developments.

Data Protection:

• Responsible for ensuring compliance with the GDPR, the German Federal Data Protection Act (BDSG) and other applicable data protection requirements, in cooperation with the external Data Protection Officer.

Compliance:

• Responsible for further developing the established Compliance Management System.
• Supporting external audits in the areas of Information Security Management (ISM in accordance with ISO 27001 and C5), data protection, Business Continuity Management (BCM in accordance with ISO 22301) and Quality Management (QM in accordance with ISO 9001).
• Receiving, assessing and documenting incoming reports while ensuring confidentiality and whistleblower protection (internal reporting office); responsible for operating and further developing our whistleblowing system in accordance with the German Whistleblower Protection Act (HinSchG).
• Promoting a company-wide risk culture and establishing communication structures between the various compliance functions.
• Regularly coordinating with and reporting to internal and external stakeholders (e.g. the Supervisory Board and external auditors).

WHAT WE OFFER YOU:

• Work-life balance: Flexible mix of working hours and work location (40% home office) for a harmonious work-life integration.
• Vacation entitlement: 30 days of vacation, special leave and a sabbatical account for restful time off and relaxation.
• Quality of life: private accident insurance, supplementary health insurance, extended sick pay and a company pension scheme. Focus on your mental health through the Fürstenberg Institute.
• Fitness promotion: Own JobRad, virtual physiotherapy, various company running events.
• Career opportunities: Numerous certification opportunities via Udemy, Linkedin Learning and SAP Learning Hub.
• Professional and personal development: Our internal Academy, monthly company Learning Days, development dialogs and a leadership development program.
• Family first: Baby welcome package and €1,000 bonus for the birth.
• Flitzpiepen: Daycare center closed? Don't worry - there are family-friendly workplaces with play facilities for your offspring.
• Dog Office: Office space where dogs are welcome, for a relaxed working atmosphere.

Some of our benefits are location-based.

WHAT YOU BRING:

• A completed degree in business administration, economics and/or law.
• Several years of (international) experience in internal audit, risk management and compliance, preferably in a leadership role.
• In-depth knowledge of the Global Internal Audit Standards and the principles of an independent and objective internal audit function.
• A sound understanding of governance, risk management, compliance and internal control systems.
• Strong skills in risk analysis, root cause assessment and developing actionable recommendations.
• A proven track record of implementing and managing a risk management system and coordinating multiple management systems.
• In-depth knowledge of relevant standards and frameworks, particularly ISO 27001 (C5), ISO 22301, ISO 9001 and ISAE 3402.
• An open-minded approach to modern tools, including AI. Using these tools and continuously exploring new applications in day-to-day work is a given, while remaining mindful of the associated opportunities and risks.
• Excellent communication and facilitation skills, with the ability to engage and communicate persuasively with internal stakeholders, the Executive Board and external partners.
• Proficiency in IT-based tools and GRC systems (Governance, Risk and Compliance).
  German language proficiency at C1 level and English language proficiency at B2 level.

Inclusion is important to us. We explicitly welcome applications from people with severe disabilities and those with equivalent status.

CONTACT

Your personal contact Maikel will be happy to answer your questions and comments.

q.beyond AG

Talent Acquisition

Maikel Köster