Information Security Consultant (DORA / ISMS) - Senior Associate - Financial Services

Publicis Groupe; Deutschland; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Inclusive workplace

Learning opportunities

Flexible work

Health benefits

Paid leave

Job summary

Publicis Sapient in Germany is seeking an experienced Information Security and Regulatory Transformation consultant. You will support banking clients with ISMS implementation, governance, and risk management while aligning with CRR/CRD, AML/CFT, and data/governance standards.

You’ll lead workshops, shape proposals, and collaborate with risk, compliance, and technology teams. The role requires strong consulting background in Financial Services, expertise in DORA, and fluent German and English.

Qualifications

• Significant experience in management consulting within Financial Services or business transformation.
• Broad understanding of Financial Services products, processes, operating models, and regulatory priorities.
• Strong knowledge of DORA and digital operational resilience, ICT risk, third‑party risk, or regulatory implementation.
• Solid understanding of ISMS principles and information-security governance, risk management, controls, incident management, and regulatory compliance.
• Fluent German and English; degree in a related field.

Responsibilities

• Advise Financial Services clients on regulatory, operational, and technology-driven transformation topics.
• Structure ambiguous business challenges, conduct analysis, and translate findings into recommendations, roadmaps, and business cases.
• Lead and support DORA-related initiatives across governance, ICT risk management, resilience, incident management, third-party risk, and regulatory reporting.
• Support ISMS design, implementation, operation, and improvement, aligning with standards and policies.
• Develop proposals and contribute to consulting offerings; build trusted client relationships and communicate with senior management.

Skills

Management consulting

Financial services

Business transformation

DORA knowledge

ISMS governance

Risk management

Regulatory compliance

German language

English language

Education

Degree in business, economics, computer science, information security, or engineering

Job description

Company description

About Publicis Sapient

Most companies in the AI era do one of two things: they advise, or they sell you a tool. We do both. Publicis Sapient is a technology company that provides enterprise AI platforms and services, which means we build our own AI platforms and bring the strategists, product thinkers, designers and engineers who make them work inside the world's most complex businesses. It's where people and products shape the future of enterprise, and where your ideas actually reach the organizations that run the world. If you want to question how things are done, learn continuously and do the best work of your career alongside 20,000 people across 28 countries, you're in the right place. Come build with us.

Our Commitment to Inclusive Hiring

We are committed to fostering and encouraging an inclusive and welcoming environment for everyone and we believe great talent comes from many different backgrounds, experiences, and perspectives. That's why we're committed to creating a hiring process where everyone has an equal opportunity to succeed and feel safe. We welcome applications from all backgrounds and identities including: race, ethnicity, nationality, gender, disability, sexual orientation, gender identity, or religion and value the diverse experiences, perspectives, and strengths they bring to our teams.

Your Safety Matters To Us

At Publicis Sapient, we're committed to protecting candidates throughout every step of their journey with us. To help you stay safe from recruitment scams, please remember that our recruiters will only ever contact you from a Publicis Sapient email address. In some cases, we may partner with trusted, vetted recruitment agencies who will clearly identify themselves as working on behalf of Publicis Sapient. If you receive communication from any other domain claiming to represent us, please treat it with caution and contact us at [e-mail].

Overview

Why This Role Matters

In this role, you support the Information Security functions of banking clients and contribute to the operation, maintenance, and continuous improvement of their Information Security Management System (ISMS). You work in close collaboration with internal stakeholders across business and technology teams, supporting the implementation and adherence to defined security policies, standards, and controls. Within a regulated financial environment, you take responsibility for specific security-related activities, contribute to risk assessments and compliance processes, and help ensure alignment with relevant regulatory and internal requirements.

Where You’ll Make an Impact

• Advise Financial Services clients on strategic, regulatory, operational, and technology-driven transformation topics.
• Structure ambiguous business challenges, conduct analysis, and translate findings into actionable recommendations, roadmaps, business cases, and implementation plans.
• Lead and support DORA-related initiatives, assessing impacts on governance, ICT risk management, resilience testing, incident management, third-party risk, contractual arrangements, and regulatory reporting.
• Support the design, implementation, operation, and continuous improvement of ISMS frameworks, including policies, control environments, risk assessments, protection-needs assessments, security concepts, and alignment with relevant standards.
• Advise clients on the business and operating-model implications of key banking regulations, including CRR/CRD, AML/CFT, payments regulation, data and AI governance, and sustainable-finance requirements.
• Facilitate workshops and collaborate with stakeholders across business, risk, compliance, security, technology, data, and operations.
• Develop target operating models, process designs, requirements, use cases, and business impact assessments.
• Support programme and project delivery by structuring backlogs, coordinating workstreams, tracking risks and dependencies, and preparing decision materials.
• Contribute to client proposals, thought leadership, and the development of Financial Services consulting offerings.
• Build trusted relationships with client stakeholders and communicate effectively with senior management.
• Prepare clear, high-quality presentations, reports, and documentation for business, regulatory, and technical audiences.

Responsibilities

What You’ll Bring to the Team

• Significant experience in management consulting, Financial Services, or business transformation, ideally within banking.
• Broad understanding of Financial Services products, processes, operating models, and regulatory priorities.
• Proven ability to analyse complex business problems, develop structured solutions, and support implementation in interdisciplinary environments.
• Strong subject-matter expertise in DORA and practical knowledge of digital operational resilience, ICT risk, third-party risk, or regulatory implementation.
• Strong knowledge of ISMS principles and practical experience with information-security governance, risk management, controls, incident management, or regulatory compliance.
• Working knowledge of the wider banking regulatory landscape, particularly CRR/CRD, AML/CFT, payments regulation, data and AI governance, and sustainable finance, with the ability to assess implications for business processes and transformation programmes.
• A recognized certification such as CISM, CISA, CRISC, CISSP, ISO/IEC 27001 Lead Auditor, T.I.S.P., or Certified IT-Grundschutz Consultant.
• Ability to build trusted relationships with senior client stakeholders and communicate complex topics clearly.
• Experience developing proposals, supporting client development, or contributing to consulting offerings.
• Fluent German and English.
• Degree in business, economics, computer science, information security, engineering, or a related field.

Additional information

What You’ll Get in Return

• An inclusive workplace that promotes diversity and collaboration.
• Access to ongoing learning and development opportunities.
• Competitive compensation and benefits package.
• Flexibility to support work-life balance.
• Comprehensive health benefits for you and your family.
• Generous paid leave and holidays.Wellness program and employee assistance.

As part of our dedication to an inclusive and diverse workforce, Publicis Sapient is committed to Equal Employment Opportunity without regard for race, color, national origin, ethnicity, gender, protected veteran status, disability, sexual orientation, gender identity, or religion. We are also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures.

Nice to Have

• Professional experience in relevant areas such as security and risk management (including risk assessment and treatment), protection of information and assets, information security governance, information security incident management, and auditing of information systems and processes.
• Proficiency in German at a fluent level (minimum C2).
• At least one recognized certification in information security or information security risk management, such as:
  • ISACA CRISC, CISM, or CISA
  • ISO/IEC 27001 Lead Auditor
  • (ISC)² CISSP or T.I.S.P.
  • Certified IT-Grundschutz Consultant (Certifications must be verifiable and provided as part of the application.)