About this role
<p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"><span style="font-family:Arial, sans-serif">The Group Security department directly contributes to the Deutsche Börse Group ICT strategy. As a central service provider for the Group entities, Group Security is responsible to protect information assets in terms of safety, integrity, confidentiality, authenticity and availability by enforcing ICT controls based on the relevant regulatory requirements and the international standards like ISO 2700x-series on the Information Security Management System.</span></p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"> </p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"><strong><u><span style="font-family:Arial, sans-serif">Your area of work:</span></u></strong></p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"><span style="font-family:Arial, sans-serif">In this role, you will be responsible for designing, evolving, and operating technology</span><span style="font-family:'Cambria Math', serif">‑</span><span style="font-family:Arial, sans-serif">enabled solutions supporting the group-wide Information and Communication Technology (ICT) Risk Management function and its processes. The role combines solution architecture, risk methodology expertise, data management, and project delivery, acting as a key bridge between risk, cybersecurity, business, and technology teams.</span></p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"> </p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"><span style="font-family:Arial, sans-serif">You will play an instrumental role in translating regulatory and risk management requirements into scalable, well</span><span style="font-family:'Cambria Math', serif">‑</span><span style="font-family:Arial, sans-serif">governed GRC solutions while ensuring data quality, methodological consistency, and effective change delivery.</span></p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"> </p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"><span style="font-family:Arial, sans-serif">Your proactive mindset and strong interpersonal skills will be key to building trust and fostering collaboration with stakeholders across business and technology. You will thrive in a friendly, cooperative, and supportive environment that values initiative and teamwork.</span></p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"> </p> <h1 style="margin:0.0in;font-size:10.0pt;font-family:Arial, sans-serif"><u>Your responsibilities:</u></h1> <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Develop and maintain the solution architecture for ICT Risk Management tools, including the creation of prototypes, business/functional blueprints and requirements.</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Design, implement, and manage the ICT Risk Management solution in line with industry standards (NIST, ISO 27k, DORA) and streamline the control assessment through enterprise ready workflows and automation (OSCAL).</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Oversee the data management lifecycle for all data utilized by the ICT Risk Management process, ensuring data consistency, accuracy, and fitness for purpose.</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Lead and manage multi-disciplinary projects (including developers, PMOs, and SMEs) using an AGILE approach.</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Drive change management initiatives by creating and tracking project plans in designated tools.</span></li> <li style="margin:0.0in 0.0in 10.0pt 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Create and maintain comprehensive documentation, including user guides and work instructions, for ICT Risk Management solutions.</span></li> </ul> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"> </p> <p style="margin:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif"><strong><u><span style="font-family:Arial, sans-serif">Your profile:</span></u></strong></p> <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Master degree in Information Technology, Business Informatics or comparable education</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">8+ years of experience in GRC / ICT Risk Management solution architecture and functional design</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Solid understanding of cybersecurity domains and regulatory frameworks</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Advanced data management and analysis capabilities</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Hands</span><span style="font-size:10.0pt;line-height:115%;font-family:'Cambria Math', serif">‑</span><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">on experience with Jira, Groovy, JSON, GitHub, and risk</span><span style="font-size:10.0pt;line-height:115%;font-family:'Cambria Math', serif">‑</span><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">related tooling</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Experience with BI tools such as Power BI and Eazy BI is a plus.</span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Strong analytical skills, critical thinking, ability to identify problems, propose and communicate solutions </span></li> <li style="margin:0.0in 0.0in 0.0in 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Autonomous and resilient, with strong planning and organization skills</span></li> <li style="margin:0.0in 0.0in 8.0pt 24.0px;line-height:115%;font-size:11.0pt;font-family:Calibri, sans-serif"><span style="font-size:10.0pt;line-height:115%;font-family:Arial, sans-serif">Exceptional communication and stakeholder management skills, both verbal and written in English (German would be considered an asset)</span></li> </ul>