À propos du poste
Permanent role leading one DORA workstream to completion. Four streams are open: ICT asset & system management; logging, DLP & encryption; ITSCM & cryptography; incident & change management.
Responsabilités
- Own planning, steering and control of your DORA sub-project to a formal project-management guideline
- ICT asset & system management: full CMDB documentation to DORA Art. 8, asset lifecycle management to Art. 7, recurring asset controls, capacity management, patch management, vulnerability communication, system hardening baselines
- Logging, DLP & encryption: cross-channel data-loss-prevention concept, sharpened SIEM use cases, risk-based data-in-use encryption, a DORA-compliant minimum logging standard and per-asset logging status evidence
- ITSCM & cryptography: backup requirements derived from business impact analysis, revision of the cryptography policy against DORA, monitoring for weak or obsolete algorithms, full key lifecycle documentation, a central certificate register
- Incident & change management: extend regular and emergency change processes to DORA Art. 10, change classification, ex-post security review, traceability and auditability, ICT incident source definition and DORA-compliant incident documentation in the ticket tool (Art. 17 ff.)
- Secure sub-project goals across time, quality and cost; report in management-ready form
- Align procedures with the information-security committee and the written order (SfO); embed changes in the ISMS
L'IA gère · Vous gérez
L'IA gère
Requirement-to-control mapping · Procedure and concept first drafts · Evidence packs and gap lists · Status reporting
Vous gérez
Regulatory interpretation · Workstream scope and priorities · Control design decisions · Audit defensibility
Votre profil
- 5+ years leading IT-security or regulatory projects longer than 12 months
- Proven delivery in a DORA context; strong grasp of DORA, MaRisk, BAIT and GDPR
- Depth in at least one stream: ICT asset/capacity/patch management and hardening; DLP, logging and encryption; ITSCM, BIA, backup and cryptography/PKI; incident and change management
- ISMS tooling and central ticket tooling
- Requirements and change management, test management, quality management, rollout management
- Confident with Microsoft Project
- German C1 or better plus good business English
Qualifications
- Degree in business administration, economics, mathematics, computer science or business informatics, or equivalent experience
- Project-management certification preferred (PRINCE2, IPMA, PMI)
- Comfortable owning a regulated workstream with hard external deadlines