Posted 1w ago

Head of ICT risk Management - EU

@ Domestic & General
Wiesbaden, Hesse, Germany
HybridFull Time
Responsibilities:Leading design, Governing outsourcing, Coordinating reporting
Requirements Summary:Deep knowledge of DORA, ISO27001/27005, NIS2, EBA/regulatory frameworks; fluent German and English; strong communication and stakeholder influence; senior regulatory liaison experience.
Technical Tools Mentioned:DORA, ISO27001, ISO27005, NIS2, BSI German IT Standard, Regulatory frameworks, BaFin incident reporting
Save
Mark Applied
Hide Job
Report & Hide
Job Description

ICT Risk Manager - Wiesbaden, Germany

Hybrid

About Us

Domestic & General is a leading provider of appliance care and protection solutions. We work with some of the world’s best-known manufacturers and retailers – helping millions of households keep daily life on track. 

We’re more committed than ever to delivering exceptional customer service. And we’re championing a cost-smart, sustainable future – where repairing more means wasting less.

We operate in 14 countries, with a growing presence in European markets.

About the Role

The Head of DORA & ICT Risk Management is a strategic leader responsible for designing, embedding, and governing the Digital Operational Resilience (DORA) framework across the EU business. The is a newly created role which provides enterprise leadership of ICT risk management, outsourcing oversight, regulatory engagement, incident governance, and digital resilience testing. 

Key Responsibilities:

  • Lead the design and continuous enhancement of the DORA-aligned ICT Risk Management Framework. 
  • Advise senior leadership and the Board on regulatory expectations and required remediation. 
  • Own and govern outsourcing and critical thirdparty oversight aligned with DORA. 
  • Oversee incident classification, regulatory notifications, and remediation processes. 
  • Monitor material incidents and coordinate timely notifications and follow-up with BaFin and internal stakeholders. 
  • Produce Boardlevel reporting and actionable risk insights. 
  • Support first-line owners of ICT and operational resilience risks, coordinating risk identification, assessment, mitigation, and control testing. 
  • Lead ICT Third Party management for DGIEU, ensuring third-party arrangements meet regulatory requirements and support resilience objectives. 
  • Own the DORA-aligned resilience strategy and drive a structured improvement programme that benchmarks maturity, delivers remediation, and supports Board-level review. 
  • Oversee externally and intragroup provided services, including contracts, monitoring, Register of Information, and exit plans, ensuring BaFin and DORA compliance. 
  • Collate and assess outcomes of digital resilience testing and periodic self-assessments of the ICT Risk Management Framework. 
  • Review and challenge risk assessments, service-level controls, and root-cause analyses, ensuring corrective actions are implemented. 
  • Produce clear, data-driven reporting for senior management and the Board, highlighting key risks, control gaps, and strategic remediation actions. 
  • Support regulatory communications and drive continuous improvement to enhance operational resilience maturity. 
  • Drive cultural uplift in digital resilience across the enterprise. 

Required Skills and Experience:

  • Deep understanding of DORA, ISO27001, ISO27005, BSI German IT Standard, NIS2, EBA guidelines, or EU regulatory frameworks. 

  • Proven experience of engaging directly with BaFin on incident reporting and regulatory matters.

  • High level of German and English language skills.

  • Exceptional communication and seniorlevel influencing skills. 

  • Strong analytical and problemsolving capability. 

  • Ability to operate in highly regulated, complex digital environments. 

  • Leadership experience with distributed or virtual teams. 

  • Experience in financial services or insurance sectors (preferred). 

Benefits:

  • Competitive salary.
  • Company Pension Scheme
  • Participation in our Group Bonus scheme.
  • Everyday Flexibility - where you have the opportunity to choose your preferred place of work every day - home or office.
  • Free Domestic & General Policy on a qualifying Appliance of your choice and 50% discount on further policies you purchase.
  • 25% discount on policies for your family and friends

At Domestic & General, we’re committed to creating an inclusive workplace where everyone feels welcome. We want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if you don’t, we’d still encourage you to apply.

Domestic & General is an equal opportunities employer, which means we treat people fairly and welcome applications from all suitably skilled individuals regardless of gender, age, race, disability, ethnic background, religion or belief, sexual orientation, gender reassignment, or marital/family status.

At Domestic & General, we’re committed to creating an inclusive workplace where everyone feels welcome. We want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if you don’t, we’d still encourage you to apply.

Domestic & General is an equal opportunities employer, which means we treat people fairly and welcome applications from all suitably skilled individuals regardless of gender, age, race, disability, ethnic background, religion or belief, sexual orientation, gender reassignment, or marital/family status.

At Domestic & General, we are proud of our 100-year legacy and excited about our future growth plans. We are expanding our horizons, entering new markets and territories internationally and we need your expertise to help us on the journey.