ICT Risk Governance Specialist (f/m/d)

RxREVU, Inc.; Eschborn; Hybrid; EUR 70.000 - 90.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Free parking

Health and wellbeing programs

Salary bonuses and subsidies

Zusammenfassung

Deutsche Börse Group is seeking a professional to advance ICT risk governance across post-trade entities. You will contribute to developing ICT risk frameworks, support board-level reporting, and collaborate with ICT, business, compliance, audit, and risk teams to strengthen digital resilience.

The role requires coordinating risk governance activities, preparing governance materials, and supporting regulatory inspections and audits.

Qualifikationen

• Proven expertise in ICT risk governance and digital operational resilience.
• Experience preparing management reports, governance presentations, and regulatory deliverables.
• Strong understanding of ICT risk frameworks and regulatory environments (e.g., DORA, EBA Guidelines, NIS2, ISO 27001).

Aufgaben

• Develop, maintain and improve ICT Risk Framework aligning with regs and business objectives.
• Coordinate ICT risk governance across post-trade entities; ensure consistent standards and reporting.
• Prepare ICT risk reports and governance materials for senior management and entities.
• Support regulatory inspections, audits, and remediation tracking with documentation and action plans.
• Provide ICT risk guidance for material changes, outsourcing, information classification, incidents, and initiatives.
• Contribute to risk awareness, resilience exercises, automation, and governance process enhancements.

Kenntnisse

ICT Risk Management

Regulatory awareness

Governance reporting

Stakeholder management

English proficiency

Ausbildung

University degree in Information Security / IT / CS / Risk Management

Jobbeschreibung

Eschborn (Frankfurt area), Luxembourg

Your career at Deutsche Börse Group

Your area of work:

The ICT Risk Governance team is responsible for establishing and steering second-line ICT risk governance across Clearstream's post-trade entities. The function drives the evolution of the ICT Risk Framework and ensures alignment with business objectives, risk appetite, regulatory requirements, and operational resilience expectations.

You will contribute to the development and maintenance of ICT risk governance processes, support board-level reporting and regulatory engagements, coordinate risk assessments and audits, and help drive harmonized ICT risk management practices across legal entities. You will work closely with ICT, business, compliance, audit, and risk stakeholders to strengthen digital operational resilience and governance effectiveness.

Your responsibilities:

• Support the development, maintenance, and continuous improvement of the ICT Risk Framework, ensuring alignment with regulatory requirements, risk appetite, and business objectives.
• Coordinate ICT risk governance activities across post-trade entities, promoting consistent governance standards, reporting methodologies, and decision-making principles.
• Prepare and maintain ICT risk reports, management information, and governance committee materials for senior management and legal entity governance bodies.
• Support regulatory inspections, internal audits, external assessments, and remediation tracking by maintaining accurate documentation, evidence, and action plans.
• Provide ICT risk guidance and advisory services for material changes, outsourcing arrangements, information classification, ICT incidents, and strategic initiatives.
• Contribute to ICT risk awareness initiatives, resilience exercises, automation opportunities, and continuous enhancement of governance processes and reporting capabilities

Your profile:

• University degree in Information Security, Information Technology, Computer Science, Risk Management, Business Administration, or a related discipline.
• 3-4 years of professional experience in ICT Risk Management, Information Security, Operational Risk, IT Governance, Internal Audit, or related control functions.
• Strong understanding of ICT risk frameworks, digital operational resilience, outsourcing risk management, governance processes, and regulatory environments (e.g., DORA, EBA Guidelines, NIS2, ISO 27001).
• Experience in preparing management reports, governance presentations, audit documentation, and regulatory deliverables for senior stakeholders.
• Excellent analytical, organizational, and stakeholder management skills with the ability to coordinate activities across multiple functions and legal entities.
• Professional proficiency in English; German language skills are considered an advantage.

Why Deutsche Börse Group?

We are committed to providing a work environment where everyone feels welcome and can reach their full potential. Our standards go far beyond simply matching candidates with the right position.

Mobility

• We enable you to move freely with our job tickets, job (e-)bikes and free parking opportunities.

Work environment

• Collaboration, communication, or deep focus - in our modern office buildings you will find the perfect work environment. Free drinks and food and meal allowances included.

Health and wellbeing

• We care for your health and wellbeing and besides various health promotion measures we offer you a group accident insurance and additional insurance offers at discounted rates.

Financial stability

• We provide financial stability by offering attractive salaries, company pension schemes, participation in our Group Share Plan, as well as bonuses, subsidies and discounts.

Hybrid work

• Collaborate and exchange on-site or work remotely several days a week in line with business needs and local regulations. Our hybrid working model combines the best of both worlds.

Flexible working hours

• We want your job to fit your life situation and offer flexible working time models, childcare allowance, or the possibility to study alongside your job.

Internationality

• Our market infrastructures are globally connected. Working with us means collaborating with like-minded colleagues across over 60 locations from more than 100 nations.

Development

• We promote individual development by offering internal development programmes, mentoring, further education and training budgets.