Regulatory Resilience Lead (AI & DORA)

Matproof; Berlin; On-site; Vertraulich; Full time

Benefits offered by this job

VSOP package

Access to European regulatory summits

Wellness stipend

Job summary

A leading tech firm in Berlin is seeking a Regulatory Resilience Lead to ensure compliance with the EU AI Act and DORA. This role involves overseeing AI governance, managing operational risk, and liaising with regulators. The ideal candidate has over 4 years of experience in GRC, particularly in high-scrutiny sectors like Fintech or Insurtech. The position offers a hybrid work model, equity in the company, and access to professional development opportunities.

Qualifications

• 4+ years in GRC, Legal Tech, or Operational Risk, specializing in DORA and EU AI Act.
• Ability to translate legal articles into concrete actions.
• Experience in Fintech, Insurtech, or Healthtech preferred.

Responsibilities

• Lead classification of AI models under the EU AI Act.
• Oversee DORA implementation focused on ICT Risk Management.
• Coordinate Threat-Led Penetration Testing for resilience.
• Conduct algorithmic audits partnering with Data Science.
• Serve as primary contact for EU AI Office and BaFin.

Skills

GRC Expertise

Analytical Mindset

Stakeholder Management

Education

Background in Law or Tech-Policy

CIPP/E or AI Ethics Certifications

Tools

Jira

Job description

Since we are in 2026, the EU AI Act is now fully enforceable and DORA (Digital Operational Resilience Act) has become the gold standard for financial and tech startups in Berlin.

This role is more of a \"Strategic GRC\" position, focusing on systemic resilience and algorithmic accountability.

Job Title

Regulatory Resilience Lead (AI & DORA)

Intro

With the EU AI Act and DORA now in full effect, [Company Name] is looking for a Regulatory Resilience Lead to navigate the complex intersection of high-risk AI systems and financial-grade operational resilience. This isn't a \"legal-only\" role; you will be the architect of our compliance strategy, ensuring our AI products are ethically sound and our infrastructure is \"battle-hardened\" against systemic failures. You will work directly with our Engineering and Product leads to turn regulatory hurdles into a competitive trust advantage.

• Location: Berlin (Hybrid / Flex)
• Language: English (Fluent), German (Professional working proficiency preferred for regulator liaison).

Tasks

• AI Governance Framework: Lead the classification of our AI models under the EU AI Act, managing the lifecycle of \"High-Risk\" systems, technical documentation, and bias-monitoring protocols.
• DORA Implementation: Oversee the five pillars of DORA, specifically focusing on ICT Risk Management and Third-Party Risk, ensuring our critical providers meet European resilience standards.
• Resilience Testing: Coordinate TLPT (Threat-Led Penetration Testing) and business continuity exercises to ensure we meet DORA’s operational \"anti-fragility\" requirements.
• Algorithmic Auditing: Partner with Data Science teams to perform \"Conformity Assessments\" and human-oversight audits for our customer-facing AI features.
• Regulator Liaison: Serve as the primary point of contact for the EU AI Office and BaFin, handling mandatory incident reporting and compliance filings.

Requirements

Requirements

Expertise: 4+ years in GRC, Legal Tech, or Operational Risk, with a deep specialization in DORA and the EU AI Act.

Analytical Mindset: Ability to translate abstract legal articles into concrete Jira tickets for developers.

Industry Experience: Previous experience in Fintech, Insurtech, or Healthtech is highly preferred, as these sectors face the highest scrutiny under 2026 mandates.

Education/Certs: Background in Law or Tech‑Policy. Certifications like CIPP/E or specialized AI Ethics credentials are a major plus.

Communication: Exceptional ability to manage stakeholders—you can explain \"Model Transparency\" to a developer and \"ICT Concentration Risk\" to a Founder.

Benefits

Equity: Significant VSOP package; as a Lead role, you are a key stakeholder in our long-term stability.

Professional Development: Unlimited access to European regulatory summits and advanced AI governance certifications.

Berlin Culture: Monthly team \"Stammtisch,\" a generous wellness stipend, and a bright, modern office in Neukölln or Mitte.