DORA and Information Security Officer

Schulz & Cie. GmbH

. Supporting management in defining, developing, and implementing information security and ICT policies .

Posted 10/18/2026full-timeMunich • GermanyMid-LevelSenior💰 €60,000 - €84,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in developing and implementing information security policies and compliance measures, with a strong focus on regulatory requirements such as DORA and MaRisk. Capable of analyzing incidents and providing training initiatives to enhance organizational resilience.

Highest-signal resume keywords

Information Security ManagementIT ComplianceICT Risk ManagementRegulatory KnowledgeIncident Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information Security PoliciesCompliance MonitoringBusiness Continuity PlanningIncident ReportingRisk Assessment

Soft Skills

Analytical ApproachStructured Work StyleProfessional Communication

Industry Keywords

DORAMaRiskEBA GuidelinesBaFin RegulationsIT Service Providers

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Supporting management in defining, developing, and implementing information security and ICT policies
Creating and maintaining information security policies, standards, and procedures in accordance with DORA, MaRisk, and BAIT/KAIT
Monitoring compliance with information security requirements among IT and cloud service providers
Contributing to business continuity, backup, and recovery plans to strengthen ICT resilience
Initiating, coordinating, and tracking information security measures
Supporting regulatory and IT-related projects
Analyzing, documenting, and reporting information security and ICT incidents
Conducting information security awareness and training initiatives
Providing regular reports to management at least quarterly and on an ad hoc basis

Requirements

What you’ll need

Several years of professional experience in information security, IT compliance, or ICT risk management
Knowledge of relevant regulatory requirements, particularly DORA, MaRisk, EBA Guidelines, and BaFin regulations
Professional experience at an auditing or consulting firm or a BaFin-regulated financial institution
Structured, reliable, and analytical approach to work
Confident and professional manner when interacting with clients and management
Interest in regulatory topics and their practical implementation

Benefits

Comp & perks

Flexible working hours
Hybrid and remote work options
Secure position at a successful company with more than 14 years of experience
Company pension scheme
Health and fitness benefits (e.g., Wellpass)
Training and professional development
Modern work equipment
High level of autonomy and opportunities to shape processes
Permanent employment contract