Freelance Consultant - AI Governance & Regulatory Controls Banking (m/w/d)

We are seeking support for our team in a customer project to build a dynamic control framework for AI regulations at a large German financial services provider.
Start: Short-term, May 2026
Duration: Initial 3 months, extension planned for 12+ months
FTE: 50–100 %, depending on profile and project phase
Modus: Hybrid Frankfurt — typically 1–2 days on-site, rest remote
Languages: German (fluent), English (fluent)
Daily rate: To be agreed

Tasks

We are developing a consolidated framework for our customer that structures regulatory requirements for AI systems (EU AI Act, BaFin MaRisk/BAIT, DORA, ISO/IEC 42001 etc.) into internal security controls — including an assessment process for individual AI use cases and explicit consideration of agent-based AI systems.

The project is fresh in terms of methodology; the scope for design is high.

Qualification

We are filling two complementary senior roles in the regulatory environment. You would ideally apply to one or both of these orientations — or cover them substantively if you can.

Orientations A — Framework & Control

You will be responsible for the methodological core: deriving regulations into controls, consolidating overlapping requirements from various regulatory sources, horizon scanning, and releasing the control inventory.

Relevant background:

• 5+ years GRC / Regulatory Compliance in the financial services sector
• Practical experience with BaFin regulation (MaRisk, BAIT), ideally accompanied by DORA implementation
• Experience in building or developing control frameworks
• Familiarity with mapping logics between overlapping standards (e.g. ISO 27001 ↔ BAIT ↔ DORA)
• Methologically structured, skilled in handling versioning, release management, and governance documentation

Orientations B — AI Regulatory Compliance

You will drive the in-depth work on AI-specific regulations: what does the EU AI Act require article by article, which requirements arise from BaFin and DORA contexts, how are these translated into concrete, verifiable controls, and which regulatory assessments must be performed per use case.

Relevant background:

• 5+ years Regulatory Compliance, IT audit or AI governance in financial services providers or comparable regulated environments
• Familiarity with the EU AI Act, ISO/IEC 42001 or comparable AI governance frameworks
• Experience in translating regulatory requirements into requirement and control levels
• Understanding of KI-specific risk dimensions (model risk, transparency, data quality, human oversight)
• Sensitivity for agent-based AI systems and their regulatory implications — deep ML security architecture is not required, but the ability to interact professionally with security architects

Hybrid profile

If you substantively cover both orientations, we would be particularly pleased. Please let us know openly where your focus lies.

Benefits

• Gestaltungsspielraum instead of mere processing — you shape methodology and practice with
• Highly topical theme with strategic visibility at the customer
• Clear role definition and complementary second role — no silo work
• Stable operational backbone support from an experienced consulting team
• Realistic perspective on 12–18 month duration

We are looking forward to your application. Please submit CV, availability, daily rate presentation, and a short summary of which orientation (A, B or Hybrid) you are applying for, along with your application.

Find more English-speaking jobs in Germany on Arbeitnow