Risk & Compliance Manager/in (m/w/d)
Core
Build and maintain the ICT risk and information security framework for a licensed payment institution, serving regulators, internal audit, and management.
Role type
Senior IC Risk & Compliance Manager (ICT/InfoSec)
Builds
ICT risk management policies, incident reporting, outsourcing registers, and DORA compliance artifacts
Domain
Fintech / Payment Services / Regulatory Compliance
Required skills
ICT risk management, Information Security Management (ISB/CISO), DORA compliance, Outsourcing management, Incident management, Cloud architecture understanding, IAM, Logging, Recovery planning
Preferred skills
CISM, CISSP, ISO 27001, Payment or Telco experience, AML/KYC experience
Technologies
DORA, BAIT/ZAIT, MaRisk, Cloud, IAM, Logging, Recovery
Responsibilities
Build and maintain ICT risk management policies and controls; Act as Information Security Officer (ISB); Manage outsourcing and third-party registers; Drive DORA implementation; Prioritize security backlog with engineering; Report incidents to regulators
Seniority
Senior, hands-on IC