Expert IT/IS Risk Manager (w/m/d)

Your tasks:
In close cooperation with our application and information owners, you will conduct comprehensive risk assessments for our applications to identify, document and report deviations compared to our information security requirements and derive corresponding risks. With your work, you will form an important pillar for the stability of our services as a clearing house.

You will be responsible for the comprehensive risk analysis and collection of the respective evidence as well as the derivation of corresponding risks and the development and implementation of mitigation strat-egies in coordination with various information and asset owners. You ensure the compliance to internal and external standards, regulations, procedures, and best practices for our applications.

Additionally, you will support our application and information owners with internal and external audits to ensure compliance with information security requirements.

In close cooperation with colleagues from Deutsche Börse Group you will ensure and improve standardized and consistent implementation of information security practices. You guarantee fluent communication in regards of presenting complex information to both technical and non-technical audiences when engaging with our stakeholders.

Of course, you will also receive a lot in return from your team for your outstanding performances. Because we appreciate exchanging ideas, being there for each other and making each other better. We call this the Exchange Mindset.

Your skills:

Completed studies in the field of Information Technology/Engineering, information security or al-ternatively comparable qualification and at least five years of professional experience in the de-sired field
Knowledge and proven experience with security analysis, risk assessments or similar tasks
In-depth knowledge of network security, endpoint security, cloud security and technologies, iden-tity and key management and security compliance
Understanding how modern system architectures are structured and ability to quickly and effec-tively gain an overview of how a specific IT system works
Strong knowledge of information security frameworks, standards, and best practices (e.g., ISO 27001, NIST, etc.)
Experience with working in a banking and/or commodity environment
Work experience in audit or security governance field is a plus
Excellent analytical and problem-solving skills
High level of commitment, team spirit and a committed, results-oriented working style
Strong (self-)organization, coordination. communication and interpersonal skills with the ability to collaborate effectively with cross-functional teams also in virtual environments
Very good written and spoken English skills, profound German skills desirable
Professional certifications such as CISSP, CISM, CRISC or CISA are a plus.

Why join us?

Attractive salary package with many advantages such as childcare, meal allowance, job ticket, sports and leisure events
Flexible hybrid work concept and flexible working hours
Personal development through extensive training opportunities
A place in a dynamic and international team within EEX Group and Deutsche Börse Group
A long-term perspective in the constantly growing and evolving energy industry
Bespoke onboarding plan

Welcome
to our World.

Hello from ECC, the leading clearing house for energy and commodity products in Europe. As part of EEX Group, we have our roots in Leipzig and 21 offices worldwide. We provide security for our customers, by ensuring the physical and financial settlement of transactions for EEX Group and further partner exchanges. Why are we so successful? We are a team of individual experts that drive forward exciting projects while sharing experiences, celebrating success and creating memories, together.