Your area of work As IT Governance Expert in the IT Risk & Information Domain Unit of IT Governance, Risk & Transformation (GRT) you will join the Deutsche Börse Group CIO/COO team. The position will be instrumental in shaping the future IT Risk and Information Domain Unit, directly supporting the Unit Head to achieve the intended outcomes and leading topic implementation from design to operationalisation to create sustainable solutions for the Group. In our fast-paced and technology-driven business, we rely on IT not only to support day-to-day operations but to innovate, grow, and transform. Recognizing this critical role, we are IT Governance, Risk & Transformation (IT-GRT). A cornerstone of our organization’s technology strategy. With the motto to "safeguard, enable and optimize," our department is dedicated to ensuring that our IT infrastructure and applications, processes, and projects are secure, effective, and aligned with our business goals. <h1 style="margin:0.25in 0.0in 4.0pt;font-size:20.0pt;font-family:'Aptos Display', sans-serif;color:#0f4761;font-weight:normal">Your resonsibilities</h1> Lead the operationalization and continuous enhancement of the IT Risk Framework in alignment with regulatory requirements (e.g., DORA, MaRisk, AI Act) and internal governance standards. <ul style="margin-bottom:0.0in;margin-top:0.0px"> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Maintain and evolve the IT process landscape and Internal Control System (ICS) to ensure traceability, control effectiveness, and audit readiness. Conduct regular reviews and gap analyses to identify areas for improvement in the process and control environment.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Independently conduct and oversee IT risk assessments, including risk identification, evaluation, mitigation planning, and follow-up in complex ICT environments.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Provide expert input to cross-functional risk and governance initiatives, particularly in the context of regulatory compliance and internal control frameworks. Derive strategic recommendations based on risk analysis and KPIs, supporting decision-making at the executive level.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Actively support regulatory audits, internal assessments, and external reviews, including coordination of responses and evidence.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Take ownership of change-driven special topics within IT risk and governance, ensuring timely and effective implementation of emerging or ad hoc initiatives.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Drive the implementation of risk and governance topics with a holistic, end-to-end awareness for ICT-environments, ensuring alignment across business units, data domains, and the broader organizational architecture.</li> </ul> Your profile <ul style="margin-top:0.0in;margin-bottom:0.0in" type="disc"> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">University degree in Computer Science, Business Administration, Information Security, or a related field.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Minimum of 7 years of professional experience in IT Risk Management, IT Governance, or Information Security, ideally within the financial services or fund industry.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">In-depth knowledge of European and local regulatory requirements, particularly DORA, MaRisk, and relevant CSSF requirements guidelines.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Experience in managing asset-linkages and ICT risk aggregation in enterprise-wide information domain models that comprises also modern technologies such as Cloud, AI, and Data Analytics.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">High level of independence, intellectual curiosity, and commitment to continuous improvement. Strong analytical and critical thinking skills with a proactive, hands-on, and solution-oriented mindset.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Recognized certifications such as CGEIT, CRISC, or equivalent are preferred.</li> <li style="margin-top:0.0in;margin-right:0.0in;margin-bottom:0.0in;font-size:10.0pt;font-family:'News Gothic GDB', sans-serif">Fluent in English; German language skills are an asset.</li> </ul>

IT Governance Expert IT Risk & Information Domain (f/m/d) (Prague, CZ) @ Deutsche Börse AG

About this role

Ready to apply?