CYBER & INFORMATION SECURITY AND ICT RISK OFFICER (DEPUTY) (f/m/d)

In this Second Line of Defense role, you govern and evolve the Cyber & Information Security and ICT Risk framework for 360T. You provide independent oversight, challenge, and guidance while supporting regulatory and operational excellence across the group. You deputize for the function lead and collaborate with governance bodies to monitor risk, incidents, and resilience. This is an opportunity to shape risk strategy, strengthen controls, and engage with regulators and industry peers in a fast-paced, global environment.

• performance appraisals
• 360T Academy
• Frankfurt am Main location
• multinational and multicultural environment
• office in city center
• stable and growing organization

• Develop and refine the Cyber & Information Security and ICT Risk strategy, policies, and oversight framework aligned with business goals
• Ensure alignment with legal, regulatory, standards, and industry best practices
• Translate regulatory requirements and business objectives into governance and oversight measures
• Report on risk profile, roadmaps, control environment, testing, and incidents to management and governance bodies
• Deputize for the responsible function lead in committees and governance activities
• Identify and assess emerging ICT and cyber risks and propose mitigation or escalation
• Oversee ISMS governance and related policy operation across the First Line
• Support group-wide risk governance, training, and awareness initiatives
• Interface with Group Risk Management for ICT and cyber risk identification, assessment, and reporting
• Challenge incident management, DR/BC readiness, and regulatory notification compliance from a Second Line perspective
• Provide independent advice on risk matters and support policy evolution
• Assess conflicts between business objectives and information security considerations
• Maintain risk and control criteria and oversee third-party risk, outsourcing, and material changes
• Review disaster recovery and business continuity arrangements for adequacy and alignment with risk appetite

• Professional experience in cyber/information security, ICT risk, or related risk/control function, ideally in regulated finance
• Solid understanding of information security and ICT risk management frameworks, governance, and internal controls
• Familiarity with regulatory requirements and standards affecting financial institutions and market infrastructures
• Experience with risk assessments, control reviews, incident oversight, third-party risk, and business continuity
• Ability to independently assess and challenge risks and collaborate with First Line
• Strong analytic and communication skills to translate technical topics into risk-based guidance
• Confidence communicating with senior management across technical, business, risk, and compliance functions
• Structured, pragmatic, solution-oriented approach with integrity and professional judgment
• Very good English; German is a plus

• analytical thinking
• clear communication
• stakeholder management
• Information Security Management System (ISMS)
• ICT risk management
• regulatory and standards compliance