Head of Governance and Organization

As an experienced leader, you will take charge of the Governance & Organization department and report directly to the COO. Your core task is the effective implementation and continuous development of DORA governance. Together with a high-performing team of experienced specialists, you will create resilient structures, set clear standards, and provide key impetus for the safe and sustainable development of our institution. DORA Governance: Responsibility for bank-wide DORA coordination and continuous development of the ICT risk management framework for digital operational risks. Steering of relevant fields of action and ensuring clear responsibilities and effective implementation in line with DORA, BaFin, and EBA requirements. Leadership and Overall Responsibility: Technical and disciplinary leadership of the Governance & Organization department, in particular the DORA coordination office, the cross-divisional DOR governance with the ICT risk management framework, the specialized second-line risk functions for Third-Party Risk Management and Business Continuity Management, the interface to Information Security (CISO), and the central process management including the bank-wide written procedural rules (SfO). Third-Party Risk Management: Strategic steering of the integrated TPRM team and responsibility for monitoring the entire third-party lifecycle – from risk analyses and due diligence to continuous monitoring of critical and important IT and cloud service providers. Business Continuity and Crisis Management: Ensuring operational continuity through robust business impact analyses, contingency plans, and IT service continuity strategies, as well as assuming a key role in the central crisis committee and responsibility for physical security and occupational safety of the bank. Central Process Management and SfO: Design of the bank-wide end-to-end process model and process governance, particularly the identification of process risks and controls at the interface to the ICS, while ensuring currency, quality, and consistency of the written procedural rules. Independent Risk Monitoring: Validation of ICT risk analyses, responsibility for the DOR test program, and derivation of the ICT risk appetite for established risk functions in coordination with Operational Risk Management. Advisory and Board Reporting: Direct and audience-appropriate reporting and advice to the management body – including the DOR report – and confident support of internal and external audit activities.

As an experienced leader, you will take charge of the Governance & Organization department and report directly to the COO. Your core task is the effective implementation and continuous development of DORA governance. Together with a high-performing team of experienced specialists, you will create resilient structures, set clear standards, and provide key impetus for the safe and sustainable development of our institution. DORA Governance: Responsibility for bank-wide DORA coordination and continuous development of the ICT risk management framework for digital operational risks. Steering of relevant fields of action and ensuring clear responsibilities and effective implementation in line with DORA, BaFin, and EBA requirements. Leadership and Overall Responsibility: Technical and disciplinary leadership of the Governance & Organization department, in particular the DORA coordination office, the cross-divisional DOR governance with the ICT risk management framework, the specialized second-line risk functions for Third-Party Risk Management and Business Continuity Management, the interface to Information Security (CISO), and the central process management including the bank-wide written procedural rules (SfO). Third-Party Risk Management: Strategic steering of the integrated TPRM team and responsibility for monitoring the entire third-party lifecycle – from risk analyses and due diligence to continuous monitoring of critical and important IT and cloud service providers. Business Continuity and Crisis Management: Ensuring operational continuity through robust business impact analyses, contingency plans, and IT service continuity strategies, as well as assuming a key role in the central crisis committee and responsibility for physical security and occupational safety of the bank. Central Process Management and SfO: Design of the bank-wide end-to-end process model and process governance, particularly the identification of process risks and controls at the interface to the ICS, while ensuring currency, quality, and consistency of the written procedural rules. Independent Risk Monitoring: Validation of ICT risk analyses, responsibility for the DOR test program, and derivation of the ICT risk appetite for established risk functions in coordination with Operational Risk Management. Advisory and Board Reporting: Direct and audience-appropriate reporting and advice to the management body – including the DOR report – and confident support of internal and external audit activities.

Successfully completed degree in Business Informatics, Business Administration, Business Law, Economics, or a comparable qualification, plus solid experience in operational risk management (OpRisk/NFR), information security, or IT governance. Several years of solid experience in implementing and managing regulatory requirements for digital operational resilience, especially DORA, and very good knowledge of ICT risk management in a regulated financial institution. Proven experience in technical and disciplinary leadership of high-performing expert teams and in cross-divisional steering of complex transformation and regulatory topics. Confident stakeholder management up to C-level and board level. Very good knowledge of common process and governance frameworks such as COBIT and ITIL, as well as common security standards such as ISO 27001. Strong analytical skills, process-oriented thinking, and the ability to translate regulatory requirements into effective and efficient banking processes. Clear communication, integrity, and diplomatic skill to reconcile differing interests, make sound decisions, and provide guidance to the team. Negotiation-level proficiency in German and English, both written and spoken.