IT Governance Expert IT Risk & Information Domain (f/m/d)

Deutsche Börse Group; Frankfurt; Vor Ort; EUR 80.000 - 100.000; Vollzeit

Zusammenfassung

A leading financial services company is seeking an IT Governance Expert to enhance the IT Risk Framework and ensure compliance with regulatory standards. The ideal candidate will have over 7 years of experience in IT Risk Management and strong analytical skills. Fluency in English is required, and proficiency in German is a plus. This role is essential for shaping sustainable IT solutions across the organization.

Qualifikationen

• 7+ years of professional experience in IT Risk Management or Governance.
• In-depth knowledge of European regulatory requirements, especially DORA and MaRisk.
• Experience with Cloud, AI, and Data Analytics technologies.

Aufgaben

• Lead the enhancement of the IT Risk Framework aligned with regulatory requirements.
• Conduct and oversee IT risk assessments in complex ICT environments.
• Provide expert input to risk and governance initiatives for compliance.

Kenntnisse

IT Risk Management

IT Governance

Information Security

Analytical Skills

Critical Thinking

Fluent English

German language skills

Ausbildung

University degree in Computer Science, Business Administration, or Information Security

Tools

Regulatory Compliance Frameworks

Risk Assessment Methodologies

Jobbeschreibung

IT Governance Expert IT Risk & Information Domain (f/m/d)

As IT Governance Expert in the IT Risk & Information Domain Unit of IT Governance, Risk & Transformation (GRT) you will join the Deutsche Börse Group CIO/COO team. The position will be instrumental in shaping the future IT Risk and Information Domain Unit, directly supporting the Unit Head to achieve the intended outcomes and leading topic implementation from design to operationalisation to create sustainable solutions for the Group.

In our fast-paced and technology-driven business, we rely on IT not only to support day-to-day operations but to innovate, grow, and transform. Recognizing this critical role, we are IT Governance, Risk & Transformation (IT-GRT). A cornerstone of our organization’s technology strategy. With the motto to "safeguard, enable and optimize," our department is dedicated to ensuring that our IT infrastructure and applications, processes, and projects are secure, effective, and aligned with our business goals.

Yourresonsibilities

Lead the operationalization and continuous enhancement of the IT Risk Framework in alignment with regulatory requirements (e.g., DORA, MaRisk, AI Act) and internal governance standards.

• Maintain and evolve the IT process landscape and Internal Control System (ICS) to ensure traceability, control effectiveness, and audit readiness. Conduct regular reviews and gap analyses to identify areas for improvement in the process and control environment.
• Independently conduct and oversee IT risk assessments, including risk identification, evaluation, mitigation planning, and follow-up in complex ICT environments.
• Provide expert input to cross-functional risk and governance initiatives, particularly in the context of regulatory compliance and internal control frameworks. Derive strategic recommendations based on risk analysis and KPIs, supporting decision-making at the executive level.
• Actively support regulatory audits, internal assessments, and external reviews, including coordination of responses and evidence.
• Take ownership of change-driven special topics within IT risk and governance, ensuring timely and effective implementation of emerging or ad hoc initiatives.
• Drive the implementation of risk and governance topics with a holistic, end-to-end awareness for ICT-environments, ensuring alignment across business units, data domains, and the broader organizational architecture.

Your profile

• University degree in Computer Science, Business Administration, Information Security, or a related field.
• Minimum of 7 years of professional experience in IT Risk Management, IT Governance, or Information Security, ideally within the financial services or fund industry.
• In-depth knowledge of European and local regulatory requirements, particularly DORA, MaRisk, and relevant CSSF requirements guidelines.
• Experience in managing asset-linkages and ICT risk aggregation in enterprise-wide information domain models that comprises also modern technologies such as Cloud, AI, and Data Analytics.
• High level of independence, intellectual curiosity, and commitment to continuous improvement. Strong analytical and critical thinking skills with a proactive, hands‑on, and solution-oriented mindset.
• Recognized certifications such as CGEIT, CRISC, or equivalent are preferred.
• Fluent in English; German language skills are an asset.