DORA & Information Security Officer ensuring compliance and security for financial services. Involves policy development, monitoring standards, and managing IKT risks in a hybrid environment.
Responsibilities
Support management in defining, developing and implementing information security and ICT policies
Create and maintain information security policies, standards and procedures (including DORA, MaRisk, BAIT/KAIT)
Monitor compliance with information security requirements, including with IT and cloud service providers
Contribute to the creation and updating of emergency, backup and recovery plans (ICT resilience)
Initiate, coordinate and track information security measures
Participate in regulatory and IT-related projects
Analyze information security and ICT incidents, including documentation and reporting
Conduct information security awareness and training measures
Regular reporting to management (at least quarterly and on an ad-hoc basis)
Requirements
Several years of professional experience in information security, IT compliance or ICT risk management
Knowledge of relevant regulatory requirements, in particular DORA, MaRisk, EBA guidelines and BaFin communications
Professional experience at an audit or consulting firm or at a BaFin‑regulated financial institution
Structured, reliable and analytical way of working
Confident and professional presence with clients and management
Interest in regulatory topics and practical implementation
Benefits
Flexible working hours
Hybrid & remote work
Secure position in a company successful for over 14 years
Tech Lead - Information Security role at Ameriprise India, focusing on OWASP vulnerabilities and code remediation. Collaborating with teams to ensure secure and high - quality applications.
Managing Consultant leading the planning and execution of cybersecurity assessments for federal clients. Responsible for managing a team and ensuring compliance with security policies and regulations.
Consultant in Technology and Cybersecurity at Guidehouse supporting federal clients. Focus on business processes, compliance, and project management within a dynamic and innovative environment.
Duty Manager at CPH Airport overseeing security operations and managing 25 staff members. Collaborating closely with a leadership team and ensuring high security standards.
SME Security Control Assessor supporting HHS - ACF security assessment activities and applying NIST frameworks. Responsible for documentation, testing, and team collaboration for control effectiveness.
Azure Security Engineer required to remediate vulnerabilities in a hybrid environment. Focusing on Microsoft Defender Suite and improving security posture across Azure and endpoints.
AWS - focused security engineer responsible for remediating vulnerabilities in cloud applications. Collaborating with developers and data engineers to implement secure fixes.
Security Manager leading Information Security strategy and compliance at Envitia. Overseeing security standards and incident response while fostering a security - aware culture.
Conseiller.ère en santé et sécurité au travail chez Sleeman Breweries. Soutien aux programmes de santé et sécurité au travail au Québec, en logistique.
Junior Security Auditor at TÜV TRUST IT specializing in eID and Trust Services consulting. Engaging in auditing and compliance with legal and technical frameworks.