Governance, Risk, and Compliance (GRC) Consultant | Fachberater für Governance, Risk Management und Compliance (GRC) (m/w/d)

Finanz Informatik GmbH & Co. KG

Münster, Westfalen, Nordrhein-Westfalen, Deutschland
Published May 6, 2026
Full-time
No information

Job Summary

As a GRC Consultant within the Digital Ecosystems division of a leading European banking IT provider, you will play a pivotal role in steering and advancing internal processes to meet complex regulatory requirements. Your day-to-day responsibilities include acting as a central interface between 1st and 2nd line functions, providing high-level advisory on standards such as ISO 27001, IDW PS 951, and DORA, and managing the resolution of conflicts between regulatory mandates and operational needs. You will prepare strategic decision-making documents for management and oversee internal and external audits. This role is ideal for an experienced professional looking to influence digital banking security within a large-scale financial environment. You will work across teams to harmonize compliance efforts, requiring a blend of deep technical regulatory knowledge, stakeholder management, and strategic advisory skills. The position offers the opportunity to drive digital transformation while ensuring robust risk and compliance frameworks are effectively implemented across the organization.

Required Skills

Education

Completed degree (Diploma/Master) in Business Informatics or a comparable qualification. Required certifications: CISA, CISM, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor.

Experience

  • Minimum 8 years of professional experience in IT compliance, IT risk management, IT security management, or auditing.
  • Proven experience as an auditor or consultant in the financial sector.
  • Extensive practical experience in the operational integration of GRC functions.
  • Experience in managing and supporting internal and external audits.
  • Experience in providing high-level advisory to management and decision-makers.

Languages

German (Basic)

Additional

  • Not specified