Job
- Level
- Erfahren
- Ort
- Ismaning
- Arbeitsmodell
- Hybrid, Onsite
- Job Feld
- IT, Security
- Anstellung
- Vollzeit
- Vertragsart
- Unbefristetes Dienstverhältnis
Job Zusammenfassung
In dieser Position entwickelst du Governance-Prozesse und steuerst Risikoanalysen, während du die Einhaltung von Compliance-Standards wie DORA und ISO 27001 sicherstellst. Du bearbeitest Audits und erstellst Governance-Reports für das Management.
Job Technologien
Deine Rolle im Team
- Strengthen and continuously improve AND-E's IT Governance, Risk & Compliance (GRC) framework across Europe.
- Coordinate and maintain governance processes, policies, standards, and procedures to ensure compliance with internal and external requirements.
- Perform IT and cyber risk assessments and maintain the IT Risk Register.
- Drive the implementation of the ICT Risk Management Framework in line with DORA, ISO 27001, and industry best practices.
- Coordinate IT control testing, assurance activities, and evidence collection, and support internal/external audits and remediation efforts.
- Prepare governance reporting, KPIs, KRIs, and presentations for senior management and governance committees.
Unsere Erwartungen an dich
Ausbildung
- University degree in Information Security, IT, Risk Management, Business Administration, or a comparable field.
Qualifikationen
- Solid understanding of governance frameworks and industry standards such as DORA, ISO 27001, COBIT, NIST, and ITIL.
- Strong stakeholder management and communication skills, with the ability to work independently across international teams.
- Fluent English required; German language skills are an advantage.
Erfahrung
- Several years of professional experience in IT Governance, IT Risk Management, Information Security, IT Compliance, or IT Audit.
- Practical experience conducting IT risk assessments and maintaining risk registers, as well as coordinating internal and external audits.
Unser Angebot
- Growth is important to us, that's why we support your personal and professional development.
- A working environment based on trust, encouragement and constructive feedback.
- Collaboration with people from different countries and cultures.
- 32 days annual leave plus 2 days off.
- Flexible working hours and home office policy (approx. 60% possible).
- Attractive employee conditions for car insurance.
- Exceptional company benefits: Employer subsidy for occupational pension scheme and disability pension, supplementary company health insurance, capital-forming benefits.
- Optional: Job ticket, car parking spaces, monthly travel allowance.
- EGYM Wellpass.
- Financial subsidy as a small wish-fulfiller.
- Free coffee, tea, water and weekly fruit delivery.
- Health management and pme family service.
Benefits
Work-Life-Integration
Themen mit denen du dich im Job beschäftigst
Job Standorte
Das ist dein Arbeitgeber
AND-E
AND-E ist ein innovatives Versicherungsunternehmen mit Hauptsitz in Ismaning bei München. Als Teil der MS&AD Group Holding zählt es zu den größten Versicherungskonzernen weltweit und beschäftigt 250 Mitarbeiter:innen in Deutschland. Das Unternehmen gilt als einer der führenden Anbieter von Telematiklösungen in Europa und kooperiert eng mit der Toyota und Lexus Organisation.
Description
- Unternehmenstyp
- Etablierte Firma
- Arbeitsmodell
- Hybrid, Onsite
- Branche
- Banken, Finanz, Versicherung
IT GRC Specialist
- Ort
- Ismaning
- Arbeitsmodell
- Hybrid, Onsite
- Diversität
- Für alle Personen geeignet (m/w/d)
