The Group Security department directly contributes to the Deutsche Börse Group ICT strategy. As a central service provider for the Group entities, Group Security is responsible to protect information assets in terms of safety, integrity, confidentiality, authenticity and availability by enforcing ICT controls based on the relevant regulatory requirements and the international standards like ISO 2700x-series on the Information Security Management System.
Your area of work:
In this role, you will be responsible for designing, evolving, and operating technology‑enabled solutions supporting the group-wide Information and Communication Technology (ICT) Risk Management function and its processes. The role combines solution architecture, risk methodology expertise, data management, and project delivery, acting as a key bridge between risk, cybersecurity, business, and technology teams.
You will play an instrumental role in translating regulatory and risk management requirements into scalable, well‑governed GRC solutions while ensuring data quality, methodological consistency, and effective change delivery.
Your proactive mindset and strong interpersonal skills will be key to building trust and fostering collaboration with stakeholders across business and technology. You will thrive in a friendly, cooperative, and supportive environment that values initiative and teamwork.
Your responsibilities:
1. Develop and maintain the solution architecture for ICT Risk Management tools, including the creation of prototypes, business/functional blueprints and requirements.
2. Design, implement, and manage the ICT Risk Management solution in line with industry standards (NIST, ISO 27k, DORA) and streamline the control assessment through enterprise ready workflows and automation (OSCAL).
3. Oversee the data management lifecycle for all data utilized by the ICT Risk Management process, ensuring data consistency, accuracy, and fitness for purpose.
4. Lead and manage multi-disciplinary projects (including developers, PMOs, and SMEs) using an AGILE approach.
5. Drive change management initiatives by creating and tracking project plans in designated tools.
6. Create and maintain comprehensive documentation, including user guides and work instructions, for ICT Risk Management solutions.
Your profile:
7. Master degree in Information Technology, Business Informatics or comparable education
8. 8+ years of experience in GRC / ICT Risk Management solution architecture and functional design
9. Solid understanding of cybersecurity domains and regulatory frameworks
10. Advanced data management and analysis capabilities
11. Hands‑on experience with Jira, Groovy, JSON, GitHub, and risk‑related tooling
12. Experience with BI tools such as Power BI and Eazy BI is a plus.
13. Strong analytical skills, critical thinking, ability to identify problems, propose and communicate solutions
14. Autonomous and resilient, with strong planning and organization skills
15. Exceptional communication and stakeholder management skills, both verbal and written in English (German would be considered an asset)
Why Deutsche Börse Group?
We are committed to providing a work environment where everyone feels welcome and can reach their full potential. Our standards go far beyond simply matching candidates with the right position.
Mobility
We enable you to move freely with our job tickets, job (e-)bikes and free parking opportunities.
Work environment
Collaboration, communication, or deep focus – in our modern office buildings you will find the perfect work environment. Free drinks and food and meal allowances included.
Health and wellbeing
We care for your health and wellbeing and besides various health promotion measures we offer you a group accident insurance and additional insurance offers at discounted rates.
Financial stability
We provide financial stability by offering attractive salaries, company pension schemes, participation in our Group Share Plan, as well as bonuses, subsidies and discounts.
Hybrid work
Collaborate and exchange on-site or work remotely several days a week in line with business needs and local regulations. Our hybrid working model combines the best of both worlds.
Flexible working hours
We want your job to fit your life situation and offer flexible working time models, childcare allowance, or the possibility to study alongside your job.
Internationality
Our market infrastructures are globally connected. Working with us means collaborating with like-minded colleagues across over 60 locations from more than 100 nations.
Development
We promote individual development by offering internal development programmes, mentoring, further education and training budgets.