IT GRC Specialist (m/f/d)

Aioi Nissay Dowa Europe; Deutschland; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

32 days annual leave plus 2 days off

Flexible working hours & home office ~

Employer subsidy for pension

Wellness and health benefits

Job summary

AND-E, part of MS&AD Group, seeks a dedicated IT Governance, Risk & Compliance professional to strengthen and maintain governance processes, standards, and risk management across Europe. You will coordinate audits, reporting, and evidence collection while aligning with DORA, ISO 27001, and industry best practices.

You will collaborate with IT, compliance, and auditing stakeholders, managing internal and external audits and delivering insightful governance metrics.

Qualifications

• University degree in Information Security, IT, Risk Management, Business Administration, or a comparable field.
• Several years of experience in IT Governance, IT Risk Management, Information Security, IT Compliance, or IT Audit.
• Solid understanding of governance frameworks and industry standards such as DORA, ISO 27001, COBIT, NIST, and ITIL.

Responsibilities

• Strengthen and continuously improve AND-E's IT Governance, Risk & Compliance (GRC) framework across Europe.
• Coordinate and maintain governance processes, policies, standards, and procedures to ensure compliance with internal and external requirements.
• Perform IT and cyber risk assessments and maintain the IT Risk Register.
• Drive the implementation of the ICT Risk Management Framework in line with DORA, ISO 27001, and industry best practices.
• Coordinate IT control testing, assurance activities, and evidence collection, and support internal/external audits and remediation efforts.
• Prepare governance reporting, KPIs, KRIs, and presentations for senior management and governance committees.

Skills

IT Governance

IT Risk Management

Information Security

IT Compliance

IT Audit

Stakeholder Management

English Fluency

German Advantage

Education

University degree in Information Security/IT/Risk Management

Tools

COBIT

NIST

ISO 27001

ITIL

Job description

Are you passionate about governance, risk, and compliance in the IT industry? Do you enjoy translating regulatory requirements such as DORA, ISO 27001, and the GDPR into practical, actionable frameworks? Is connecting stakeholders across IT, compliance, and auditing where you shine? Then welcome to AND-E.

How you'll make an impact

• Strengthen and continuously improve AND-E's IT Governance, Risk & Compliance (GRC) framework across Europe.
• Coordinate and maintain governance processes, policies, standards, and procedures to ensure compliance with internal and external requirements.
• Perform IT and cyber risk assessments and maintain the IT Risk Register.
• Drive the implementation of the ICT Risk Management Framework in line with DORA, ISO 27001, and industry best practices.
• Coordinate IT control testing, assurance activities, and evidence collection, and support internal/external audits and remediation efforts.
• Prepare governance reporting, KPIs, KRIs, and presentations for senior management and governance committees.

What it takes to succeed in this role

• University degree in Information Security, IT, Risk Management, Business Administration, or a comparable field.
• Several years of professional experience in IT Governance, IT Risk Management, Information Security, IT Compliance, or IT Audit.
• Solid understanding of governance frameworks and industry standards such as DORA, ISO 27001, COBIT, NIST, and ITIL.
• Practical experience conducting IT risk assessments and maintaining risk registers, as well as coordinating internal and external audits.
• Strong stakeholder management and communication skills, with the ability to work independently across international teams.
• Fluent English required; German language skills are an advantage.
• Growth is important to us, that’s why we support your personal and professional development
• A working environment based on trust, encouragement and constructive feedback
• Collaboration with people from different countries and cultures
• 32 days annual leave plus 2 days off
• Flexible working hours and home office policy (approx. 60% possible)
• Attractive employee conditions for car insurance
• Exceptional company benefits: Employer subsidy for occupational pension scheme and disability pension, supplementary company health insurance, capital-forming benefits
• Optional: Job ticket, car parking spaces, monthly travel allowance
• EGYM Wellpass
• Financial subsidy as a small wish-fulfiller
• Free coffee, tea, water and weekly fruit delivery
• Health management and pme family service

At AND-E, we are redefining the future of mobility insurance. As part of the global MS&AD Group and in close partnership with Toyota, we aim to make tomorrow's journeys simpler, safer, and smarter. Our expertise spans over 30 markets in Europe and South Africa, providing tailored insurance solutions for Toyota and Lexus customers and various white-label partners. In Germany, our offerings include motor insurance, commercial fleet coverage, payment protection insurance, and support for Japanese businesses operating abroad.

Our commitment extends beyond business: at AND-E we support our people to grow, make a difference for customers, and help shape the future of connected mobility protection.