Information Security Compliance

Datum der ersten Veröffentlichung:
04/09/2025Ort:
DeutschlandTätigkeitsfeld:
SonstigeVertragsart:
FestanstellungStandort der Position:
Saarbrücken

Beschreibung des Unternehmens

Wir - die ODDO BHF Solutions GmbH - sind ein kürzlich gegründetes und dynamisches Business Solution Center in Saarbrücken. Als Tochter der deutsch-französischen ODDO BHF Gruppe unterstützen wir eine der führenden Privatbanken in Europa dabei, die Bedürfnisse vermögender Privatkunden, mittelständischer Unternehmen sowie institutioneller Investoren zu erfüllen.

Unsere Mission ist es, zukunftsweisende Lösungen sowie ein leistungsstarkes Serviceangebot anzubieten und somit insgesamt maßgeblich zum Erfolg der ODDO BHF beizutragen. Die ODDO BHF Solutions GmbH steht für einen starken kollegialen Zusammenhalt sowie die gelebte Wertschätzung von Vielfalt, Akzeptanz und Toleranz. Mit unserem starken Mutterunternehmen im Rücken haben wir uns ehrgeizige Ziele gesetzt, die wie gerne zusammen mit Dir erreichen wollen.
Stellenbeschreibung

**Aufgaben**
This position assists Compliance and Information Security in providing independent internal control
evaluations, auditing, monitoring, and reviewing activities performed by the 1st line of defense, including
3rd party providers/outsourcing on regards to information security relevant domains.

This role will work to ensure ongoing information security compliance by identifying information security
risks or non-compliances against the internal information security baseline, industry security standards
and frameworks, relevant laws and regulations, and industry best practices. This position also assists in
maintaining and developing appropriate policies, procedures, and other relevant documentation to
Information Security Compliance Evaluation functions and the whole organization.

Exciting tasks await you:

- ? Define and execute information security audit/control plans on ODDO BHF’s ecosystem internally
and for external suppliers/outsourcing, by identifying the control objectives in conformity with
information security related standards (ISO 2700x, BSI, NIST etc.)
- Define and execute the plan for monitoring and reviewing the results of self-assessment process
on a risk-based approach
- Verify the implementation status of control objectives and applicable security requirements by
checking the provided evidence in support to the evaluation
- Monitor the effectiveness of the compliance evaluation processes in accordance with agreed
metrics and performance measures to drive continuous improvements
- Prepare IS Compliance reports and status reports, by documenting the identified information
security non-compliances
- Actively communicate to asset/process owners and other stakeholders with the goal of identifying
the information security non-compliances on regards to 3rd parties suppliers/outsourcing
- Develop and maintain the policies, procedures, manuals, guidelines relevant to IS Compliance
Evaluation function

Anforderungsprofil

**Anforderungen**
- ? University degree in Computer Science/ Information Security or related technical fields
- Proven track record of work experience in ISM Control System related job positions
- Knowledge and experience on information security standards such as ISO 2700x, BSI, NIST
- Experience on planning and performing technical controls, monitoring and reviewing software and
hardware security, and organizational controls
- Ability to collaborate with other departments and stakeholders
- Technical certifications in Information Security and IT Audit
- +3y experience in same or similar positions in Financial Institutions
- Knowledge and/or experience on information security frameworks such as SWIFT, PCI DSS, SOX,
DORA
- ? A passion for accuracy and translating insights into a compelling narrative; able to maintain a
balance between the details and the larger picture.

**Ansprechpartner**
Herr Michael Cattarius