At AND-E, we're redefining the future of mobility insurance. As part of the global MS&AD Group and in close partnership with Toyota, we aim to make tomorrow's journeys simpler, safer, and smarter. Our expertise spans over 30 markets in Europe and South Africa, providing tailored insurance solutions for Toyota and Lexus customers and various white-label partners. In Germany, our offerings include motor insurance, commercial fleet coverage, payment protection insurance, and support for Japanese businesses operating abroad.

Our commitment extends beyond business: at AND-E we support our people to grow, make a difference for customers, and help shape the future of connected mobility protection.

Are you passionate about driving DORA forward in our organization? For you, digital resilience is more than a checkbox — it's the foundation of trust, and you translate complex regulatory requirements into practical solutions first-line teams can use. You bring a solid grasp of internal controls within financial services.
Then welcome to AND-E.

How you'll make an impact

• Maintain the DOR strategy, resilience objectives and Critical Important Functions (CIF) methodology, and steer DORA implementation by tracking regulatory requirements and compliance gaps.
• Oversee the ICT Risk Management Framework, including risk identification, assessment, monitoring and reporting processes.
• Act as 2LoD challenge/advisory function for first-line activities, reviewing risk assessments, control design and mitigation strategies.
• Integrate DOR functions across ICT risk management, business continuity, incident management, third-party risk and resilience testing, closing cross-functional process and ownership gaps.
• Monitor resilience framework effectiveness by consolidating findings from risk assessments, incidents, tests and BCM exercises.
• Coordinate classification of major ICT-related incidents and regulatory interactions, and consolidate evidence while tracking audits and findings.
• Prepare integrated DOR reporting for senior management and the Management Body, and promote ICT risk awareness and training across the organization.

• Bachelor's or master's degree in engineering, IT, Cybersecurity, Risk Management or a related field; certifications such as CISA, CISM, COBIT or CISSP are a plus.
• 4+ years of experience in IT/Information Security audit, advisory or ICT risk management.
• Solid experience with DORA implementation, operational resilience, incident management or regulatory reporting in financial services.
• Strong understanding of internal controls and financial services regulatory frameworks.
• Ability to consolidate evidence, identify gaps and translate technical resilience topics into management-ready reporting.
• Strong communication and negotiation skills, with the ability to work across 1st and 2nd Line stakeholders as well as regulators, in an international, multicultural environment.
• Professional English and German required; further languages are beneficial.

• Growth is important to us, that's why we support your personal and professional development.
• A working environment based on trust, encouragement and constructive feedback.
• Collaboration with people from different countries and cultures.
• 32 days annual leave plus 2 days off.
• Flexible working hours and home office policy (approx. 60% possible).
• Attractive employee conditions for car insurance.
• Exceptional company benefits: Employer subsidy for occupational pension. scheme and disability pension, supplementary company health insurance, capital-forming benefits.
• Optional: Job ticket, car parking spaces, monthly travel allowance.
• EGYM Wellpass.
• Financial subsidy as a small wish-fulfiller.
• Free coffee, tea, water and weekly fruit delivery.
• Health management and pme family service.