IT Governance Referent (m/f/d) – InsurTech Start-up

Our Promise for Your (Working) Life

Team Spirit
We

• contribute our own ideas and implement them together.
• work with each other and thus make onpier a little better every day.
• meet twice a year as an entire international team for our "onpier-Onshore-Days" at changing locations, e.g., Hamburg, Munich or Berlin for workshops & socializing.
• celebrate the location of our office (Theresienwiese/Hauptbahnhof) and regularly seize the opportunity for after-work events.

Key Facts
You

• love freedom? We support you with our flexible working hours and trust-based working time in a hybrid work model (40% remote work).
• want more? After consultation with your lead, you can work from abroad for a limited period (at your own expense).
• want to progress and not stand still? We support your personal development with individual training options of your choice.
• want to dive in and out elsewhere for breaks and relaxation from your daily work? We support this with 30 vacation days per year.
• want to have additional financial resources available later? We help you with a company pension plan.
• prefer to make your own decisions? You have the choice and can work on the latest devices: Mac, Windows or Linux.

Your Mission for Our Vision

You

• continuously develop and optimize IT governance structures and processes, taking regulatory requirements in the insurance environment into account.
• create, maintain and further develop IT policies, processes, control mechanisms and regulatorily required documentation.
• independently conceptualize, control and implement IT-related regulatory requirements, such as CRA and DORA, and take over the associated project management.
• coordinate and monitor the implementation of organizational and technical information security requirements and take over the function of the Information Security Coordinator.
• plan, coordinate and conduct the relevant processes and audits within the scope of ISO 27001 in close cooperation with the external CISO.
• independently manage Business Continuity Management (BCM) and continuously develop it.
• conduct Business Impact Analyses (BIA), maintain them, and create and update emergency, crisis, and recovery concepts.
• independently manage operational contract management as well as the ongoing control and monitoring of external service providers.

Your Experience for Our Quality

You

• have successfully completed a degree in (Business) Informatics, Economics, or have a comparable education or qualification.
• have at least 2-3 years of professional experience in the areas of IT Governance, IT Regulation, Information Security, or Business Continuity Management, ideally in the insurance or financial services sector.
• have good knowledge of relevant regulatory requirements and standards, especially DORA and ISO 27001.
• have experience in the conception, implementation and control of regulatory requirements as well as in the independent management of cross-departmental projects.
• are familiar with Business Continuity Management (BCM), especially in conducting Business Impact Analyses and creating emergency and recovery concepts.
• have a fundamental technical understanding of IT infrastructures, IT security measures and IT operating processes.
• have experience in operational contract management as well as in controlling and monitoring external service providers.
• are characterized by a structured, analytical and self-responsible way of working and a high level of quality and responsibility awareness.
• convince with strong communication skills, organizational talent, and the ability to implement complex regulatory requirements in an understandable and practical way.
• have very good German and good English skills in speaking and writing.