[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Deutsche Boerse jobs](https://jobs.opennash.com/companies/deutsche-boerse/) · [Search jobs](/search/) Deutsche Boerse · Frankfurt am Main, DE # Senior Specialist: IT Audit & Cyber Risk (2nd Line) (f/m/d) Frankfurt am Main, DE Senior individual contributor IT & Infrastructure Listed on Deutsche Boerse’s official careers site. Listed as of October 18, 2026. Check that it is still open and apply there. [Apply on Deutsche Boerse’s careers site →](https://careers.deutsche-boerse.com/offer/senior-specialist-it-audit-cyber-ri/3e24abd7-93d1-445a-8672-73e5ef068e1b) [OpenNash Jobs](https://jobs.opennash.com/) / [Deutsche Boerse](https://jobs.opennash.com/companies/deutsche-boerse/) / Senior Specialist: IT Audit & Cyber Risk (2nd Line) (f/m/d) ## Job description Your career at Deutsche Börse Group ### Your area of work The Chief ICT Risk Office (CISO) combines IT & IS Risk Management in the 2nd Line of Defense. The department’s mandate is to set the IT and IS (ICT) risk governance and framework, set the control objectives, control review methodology and risk assessment methodology, conduct independent risk assurance of 1st LoD ICT controls (IT and IS controls), and independently monitor and report on the level of ICT risks as well as to drive transformation and collaboration.In this role, you will be part of ICT Risk Assurance team, performing continuous monitoring and oversight to confirm that our ICT controls are well-designed, correctly implemented, and operating effectively to protect the organization. ### Your responsibilities Design and implement risk-based assurance plans aligned with internal and regulatory requirements Lead and execute IT & IS assurance assessments to evaluate risks across applications, infrastructure, cloud platforms, and network/security processes Ensure IT systems and processes comply with relevant laws, regulations, and standards, including DORA, MaRisk, CSSF, NIST, ISO 27000, etc. - Test the effectiveness of IT General Controls (ITGC) and cybersecurity controls across Access Management, SDLC & Change Management, Encryption, Third‑Party Risk, Patch & Vulnerability Management, SIEM, Penetration Testing, IT Operations, and other security domains to identify gaps and improvement areas - Prepare high‑quality assurance reports with clear observations, identified risk, and actionable recommendations for management; effectively communicate complex technical issues to both technical and non‑technical stakeholders - Track and monitor remediation actions, validate closure, and ensure sustainability of corrective measures - Collaborate with IT, Security teams, and other cross-functional stakeholders to provide risk insights or guidance on risk and control expectations for new and existing systems - Contribute to the continuous improvement of assurance methodologies, frameworks, and processes - Stay updated with emerging cyber threats, industry trends, evolving technologies, cloud risks, and changes in the regulatory landscape Your profile: A minimum of 6+ years of dedicated experience in IT/ cyber audit, or second-line assurance, or cybersecurity implementation or GRC role, with a proven track record of leading complex audits/assurance reviews or implementation projects from planning to reporting - Bachelor’s or Master’s degree in IT, Information Security, Risk Management, or a related field Practical experience in various security domains, such as: Cloud Security Network Security Vulnerability Management Penetration Testing SIEM / SOC /CERT Encryption Identity & Access Management / Privileged Access Management (PAM) Software Development & Change Management Artificial Intelligence (AI) Risk / AI Governance - Strong knowledge of IT governance and control frameworks such as COBIT, CSA‑CCM, ISO/IEC 27000 series, ITIL, and relevant EU regulations Certifications such as CISA, ISO 27001 LA/LI, CISM, CISSP, CRISC are preferred Experienced in audit/assurance techniques, developing risk-based testing strategies, sampling methodologies, and mentoring junior team members - Ability to identify root causes, understand cross-domain risk impacts, and translate complex technical and regulatory issues into business implications - Strong communication, negotiation, and influencing skills; comfortable presenting findings and building credibility with senior stakeholders - Strong understanding of the Three Lines of Defense model Languages: Excellent command of English (written and spoken), German would be a Plus ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Oct 11, 2026 - Last checked: Oct 18, 2026 - Listed for: 7 days - Location: Frankfurt am Main, DE[Apply on Deutsche Boerse’s careers site →](https://careers.deutsche-boerse.com/offer/senior-specialist-it-audit-cyber-ri/3e24abd7-93d1-445a-8672-73e5ef068e1b) ## More jobs at Deutsche Boerse ### [(Senior) IT Governance Specialist (f/m/d)](https://jobs.opennash.com/companies/deutsche-boerse/jobs/fe515c50147817d49656/) Frankfurt am Main, DE ### [Head of Xetra/Eurex Infrastructure Operations (f/m/d)](https://jobs.opennash.com/companies/deutsche-boerse/jobs/9cb8e28c1ada4e14db8b/) Frankfurt am Main, DE ### [AI & SDLC Risk Manager (f/m/d)](https://jobs.opennash.com/companies/deutsche-boerse/jobs/0a994bdda554b2cc4a78/) Frankfurt am Main, DE ### [Associate Trading Systems & Instrument Data Operations (w/m/d)](https://jobs.opennash.com/companies/deutsche-boerse/jobs/7934a3b96e16dff6dc00/) Frankfurt am Main, DE ### [Business Process Specialist - Finance Transformation / Procure to Pay (f/m/d)](https://jobs.opennash.com/companies/deutsche-boerse/jobs/f9d7e6a2e3a757be3dda/) Frankfurt am Main, DE ## Similar jobs at other companies ### [Senior Audit Manager - Enterprise-wide Risk Management (ERM) and Governance Audit](https://jobs.opennash.com/companies/hsbc-holdings/jobs/b14b96413027bf444b24/) HSBC Holdings · Buffalo, New York, United States ### [Internal Audit Executive Director – Global Audit Lead, Cybersecurity, Information Security & Cyber Resilience](https://jobs.opennash.com/companies/morgan-stanley/jobs/bd2c383bffd91cb63491/) Morgan Stanley · New York, United States of America ### [Internal Audit, Risk, Business Audit, Associate, Salt Lake City](https://jobs.opennash.com/companies/goldman-sachs-group/jobs/874287d28ae857841317/) Goldman Sachs Group · Salt Lake City, United States ### [Audit Manager I (US) – Model Risk Audit](https://jobs.opennash.com/companies/td-bank-group/jobs/9f27f886f4ca62ea4aea/) TD Bank Group · New York ### [Audit Manager II (US) - Model Risk Audit](https://jobs.opennash.com/companies/td-bank-group/jobs/d7b6460e4fd87d663032/) TD Bank Group · New York OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)