Digital Operational Resilience (DOR) Manager (m/f/d)

Are you passionate about driving DORA forward in our organization? For you, digital resilience is more than a checkbox — it's the foundation of trust, and you translate complex regulatory requirements into practical solutions first-line teams can use. You bring a solid grasp of internal controls within financial services.
Then welcome to AND-E.

• Maintain the DOR strategy, resilience objectives and Critical Important Functions (CIF) methodology, and steer DORA implementation by tracking regulatory requirements and compliance gaps.
• Oversee the ICT Risk Management Framework, including risk identification, assessment, monitoring and reporting processes.
• Act as 2LoD challenge/advisory function for first-line activities, reviewing risk assessments, control design and mitigation strategies.
• Integrate DOR functions across ICT risk management, business continuity, incident management, third-party risk and resilience testing, closing cross-functional process and ownership gaps.
• Monitor resilience framework effectiveness by consolidating findings from risk assessments, incidents, tests and BCM exercises.
• Coordinate classification of major ICT-related incidents and regulatory interactions, and consolidate evidence while tracking audits and findings.
• Prepare integrated DOR reporting for senior management and the Management Body, and promote ICT risk awareness and training across the organization.

• Bachelor's or master's degree in engineering, IT, Cybersecurity, Risk Management or a related field; certifications such as CISA, CISM, COBIT or CISSP are a plus.
• 4+ years of experience in IT/Information Security audit, advisory or ICT risk management.
• Solid experience with DORA implementation, operational resilience, incident management or regulatory reporting in financial services.
• Strong understanding of internal controls and financial services regulatory frameworks.
• Ability to consolidate evidence, identify gaps and translate technical resilience topics into management-ready reporting.
• Strong communication and negotiation skills, with the ability to work across 1st and 2nd Line stakeholders as well as regulators, in an international, multicultural environment.
• Professional English and German required; further languages are beneficial.

• Growth is important to us, that’s why we support your personal and professional development.
• A working environment based on trust, encouragement and constructive feedback.
• Collaboration with people from different countries and cultures.
• 32 days annual leave plus 2 days off.
• Flexible working hours and home office policy (approx. 60% possible).
• Attractive employee conditions for car insurance.
• Exceptional company benefits: Employer subsidy for occupational pension. scheme and disability pension, supplementary company health insurance, capital-forming benefits.
• Optional: Job ticket, car parking spaces, monthly travel allowance.
• EGYM Wellpass.
• Financial subsidy as a small wish-fulfiller.
• Free coffee, tea, water and weekly fruit delivery.
• Health management and pme family service.