Senior ICT Security Change Manager (part-/ full-time)

We’re flexible! We’re happy to receive applications in English or German. Your tasks: In this key role, you will support the organization in managing and continuously improving Cyber Security Governance, ICT Risk Management, and Operational Risk processes. Your responsibilities include:

• Governing Cyber Detection and Protection services, including:

• Vulnerability Management Governance
• Security Information and Event Management (SIEM)
• Incident Management
• Security Tool Onboarding & Security Consulting
• ICT Security Change Approval Processes
• Supporting business, product, and asset owners in managing cyber security risks and regulatory requirements
• Coordinating cyber security services provided by Deutsche Börse AG and other service providers
• Preparing regular ICT Risk reports for business divisions, senior management, and Executive Board reporting

• Performing quality reviews and challenge functions for:

• 2nd Line CISO Reporting
• Operational Risk (OpRisk) Reporting
• ICT Risk Reporting
• Supporting audit activities and ensuring compliance with information security standards, policies, and regulatory requirements
• Driving continuous improvement of cyber security governance, risk management, reporting, and operational resilience processes
• Collaborating with stakeholders across the Deutsche Börse Group to ensure effective security governance and regulatory compliance

• University degree or comparable qualification
• At least 7 years of professional experience in Cyber Security, Information Security, ICT Risk Management, or a related field

• Strong expertise in:

• Cyber Security Governance
• ICT & Operational Risk Management (OpRisk)
• Vulnerability Management Governance
• SIEM & Security Monitoring
• Incident Management
• Security Tool Onboarding & Security Consulting
• Security Change Governance
• Strong stakeholder and project management skills
• Excellent analytical and problem-solving capabilities
• Ability to translate complex technical and risk-related topics into management-focused communication
• Experience working in regulated environments, preferably within banking, clearing, exchange, or financial services
• Knowledge of security frameworks and regulations such as ISO 27001, NIST, BSI, DORA, EMIR, MaRisk, and NIS2
• Advanced Microsoft Office skills, especially Excel, PowerPoint, Power BI, VBA, and Power Automate
• Fluent German and English, both written and spoken

• Attractive salary package with many advantages such as childcare, meal allowance, job ticket, sports and leisure events
• Flexible hybrid work concept and flexible working hours
• Personal development through extensive training opportunities
• A place in a dynamic and international team within EEX Group and Deutsche Börse Group
• A long-term perspective in the constantly growing and evolving energy industry
• Comprehensive onboarding and professional growth support

to our World. Hello from ECC, the leading clearing house for energy and commodity products in Europe. As part of EEX Group, we have our roots in Leipzig and 24 offices worldwide. We provide security for our customers, by ensuring the physical and financial settlement of transactions for EEX Group and further partner exchanges. Why are we so successful? We are a team of individual experts that drive forward exciting projects while sharing experiences, celebrating success and creating memories, together. You have made it this far - together with us you can go further: Click on the “apply”-button and send us your application. You find additional job offers on our . We encourage women to apply and develop their careers with us.