(Senior) Cloud Governance Manager/Specialist (f/m/d)

<p>Your area of work: <br/> As (Senior) Cloud Governance Manager/Specialist (f/m/d) you will join the Deutsche Börse Group CIO team. The position is part of the Cloud Governance function with the IT Governance, Risk &amp; Transformation department.<br/> The Cloud Governance function is essential for developing, establishing, and further developing the Cloud Governance framework as a business-as-usual (“BAU”) domain. The development is driven out of the Governance stream of the strategic cloud program on group level (Hyperion).  Naturally this position will also have an important role within that program.</p> <p><br/> Your responsibilities: </p> <ul> <li>Proactively drive and refine a target operation model (TOM) for cloud governance to enable seamless Post-Hyperion operations: <ul> <li>Drive Target Operating Model development &amp; alignment in the context of DBG’s written record (Schriftlich Fixierte Ordnung)  to maintain and develop the operationalized controls and controls requirements</li> <li>Identify roles and responsibilities (incl. capacity requirements) for Cloud Governance </li> <li>Coordinate with Control Functions, e.g. Group Security and 2nd Line Of Defense Units and essential stakeholders, e.g. Cloud Center of Excellence, Enterprise Architecture</li> </ul> </li> <li>Own the consolidated Control Catalogue functionally (i.e. content) and administratively (i.e. change control) <ul> <li>Lead Change / Projects and Maintenance der Controls Requirements Owner und Controls Owner</li> </ul> </li> <li>Reporting: Implementation progress, Audit Findings / Remediation Support, sign-offs</li> <li>Vendor controls execution, Remediation Tracking</li> <li>Automation implementation and tracking for Governance Controls Ownership</li> <li>Feedback &amp; improvement loops for all of the above</li> </ul> <p> </p> <p>Your profile:</p> <ul> <li>7+ years of experience working within governance and compliance, security governance and comparable contexts, Big4 experience is an asset</li> <li>4+ years of experience in building &amp; operationalizing, operating integrated cloud governance (IT governance and security)</li> <li>4+ years of experience in governance for cloud hyperscalers, GCP in particular (MS Azure or AWS are an asset)</li> <li>Professional certifications relating to Cloud Governance are an asset (ISC2, google professional, etc.)</li> <li>Very good understanding of governance concepts such as controls frameworks, controls requirements, controls design &amp; implementation, and evidence collection and reporting at all these levels, and controls frameworks, CCM (CSA) and ISO27001:2013 onwards as well as COBIT</li> <li>Very good understanding of cloud financial sector regulation from CSSF and BaFin in particular.</li> <li>Experience in assessing regulatory impacts to cloud governance</li> <li>Excellent integrated thinking skills between business and technology, coupled with high degree of clients and stakeholder centricity</li> <li>Good understanding of financial markets and anticipation of stakeholders‘ control requirements and needs</li> <li>Understanding of business products, services, and underlying IT and central function services in Trading, Clearing, Settlement and Market Data is an asset</li> <li>Profound experience in process definitions, conceptual work, and structured management reporting<br/>  </li> </ul>