> Markdown version of [/jobs/ext/2100977-it-grc-specialist](https://www.wearedevelopers.com/jobs/ext/2100977-it-grc-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT GRC Specialist

- **Company:** AND-E
- **Location:** Ismaning, Germany
- **Contract:** Permanent contract
- **Skills:** Control Objectives for Information and Related Technology (COBIT), Cyber Security, Information Technology Audit, IT Management
- **Published:** August 18, 2026
- **Apply:** https://www.adzuna.de/details/5845115054

## About the Role

* University degree in Information Security, IT, Risk Management, Business Administration, or a comparable field.
 * Several years of professional experience in IT Governance, IT Risk Management, Information Security, IT Compliance, or IT Audit.
 * Solid understanding of governance frameworks and industry standards such as DORA, ISO 27001, COBIT, NIST, and ITIL.
 * Practical experience conducting IT risk assessments and maintaining risk registers, as well as coordinating internal and external audits.
 * Strong stakeholder management and communication skills, with the ability to work independently across international teams.
 * Fluent English required; German language skills are an advantage.

## Description

Ismaning, Bayern, 85737
Vollzeit
Cultural Fit

Are you passionate about governance, risk, and compliance in the IT industry? Do you enjoy translating regulatory requirements such as DORA, ISO 27001, and the GDPR into practical, actionable frameworks? Is connecting stakeholders across IT, compliance, and auditing where you shine? Then welcome to AND-E.
How you'll make an impact

 * Strengthen and continuously improve AND-E's IT Governance, Risk & Compliance (GRC) framework across Europe.
 * Coordinate and maintain governance processes, policies, standards, and procedures to ensure compliance with internal and external requirements.
 * Perform IT and cyber risk assessments and maintain the IT Risk Register.
 * Drive the implementation of the ICT Risk Management Framework in line with DORA, ISO 27001, and industry best practices.
 * Coordinate IT control testing, assurance activities, and evidence collection, and support internal/external audits and remediation efforts.
 * Prepare governance reporting, KPIs, KRIs, and presentations for senior management and governance committees.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Fireside Chat: AI and Sustainability - Thorsten Jonas](https://www.wearedevelopers.com/videos/1769-fireside-chat-ai-and-sustainability-thorsten-jonas)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [The Future of Recruiting: Innovations and Challenges in the European IT Sector](https://www.wearedevelopers.com/videos/1056-the-future-of-recruiting-innovations-and-challenges-in-the-european-it-sector)
- [Engineering/Manager Pendulum: Generating compound interest on your career](https://www.wearedevelopers.com/videos/100348-engineering-manager-pendulum-generating-compound-interest-on-your-career)

## Related Articles

- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [Jobs in Germany for Americans](https://www.wearedevelopers.com/magazine/423-jobs-in-germany-for-americans)
- [German Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/328-german-business-culture-and-etiquette)
- [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)