at Commerzbank
Investment BankingPosted 15 days ago
No clicks
**Business Expert for Dynamics CRM Governance (m/f/diverse)** Lead risk-oriented audits of IT providers supporting our Dynamics CRM. Key responsibilities include assessing ICT services, cloud operations, data security, and business continuity. Ensure contractual and regulatory compliance with DORA, MaRisk, GDPR, and EBA guidelines. Collaborate with various teams to implement measures and track progress. Bring several years of experience in provider auditing, outsourcing management, or similar roles, preferably in a regulated financial institution. Fluent English required.
- Compensation
- Not specified
- City
- Prague
- Country
- Czech Republic
Currency: Not specified
Full Job Description
In Commerzbank Digital Technology Centre Prague, we are transforming a traditional bank into a digital agile enterprise! We provide a wide range of various IT solutions, software development, and services in application operation and infrastructure.
In our area we provide processes and systems around customer master data, documents, platforms, portals and banking services for customers and employees as well as CRM and workflow tools. We are therefore an essential enabler for service and product conclusion processes and at the interface of the CIO divisions and sales of the two segments as well as operations, essential for further digitalization and efficiency enhancement at Commerzbank.
Together with a cross-functional, agile team, we need to ensure that Dynamics and Dynamics Event Management, more specifically, supports sales in a reliable way, and that requirements are implemented in a timely manner.
As an expert in provider audits and outsourcing governance, you will strengthen the effective management and monitoring of our outsourced banking services, in particular our customer relationship management application Microsoft Dynamics. You will assess our providers in a risk-oriented manner, check contractual and regulatory requirements and ensure that findings and measures are documented, addressed and tracked in a comprehensible manner. In doing so, you will work at the interface between the specialist department, purchasing, legal, compliance, data protection, information security, business continuity management, risk management and internal auditing.
Your tasks
- Planning, preparation and implementation of risk-oriented audits of IT and cloud service providers in the context of outsourcing and ICT services.
- Assessment of compliance with regulatory, legal and internal requirements, in particular the requirements of DORA, MaRisk, the EBA guidelines, the GDPR and internal bank control standards.
- Contribute technical know-how to evaluate IT architectures, cloud and operating models as well as security measures and derive the resulting risks for outsourcing.
- Review of governance, performance management, information security, data protection, authorization management, business continuity management as well as exit and transition concepts.
- Support for contract adjustments as well as review of service level agreements, control descriptions, risk analyses, certificates and test reports, for example according to ISO 27001, BSI C5 as well as SOC 1 and SOC 2.
- Assessment of subcontractors, relocations, data processing aspects and possible third-country accesses.
- Carrying out effectiveness tests and supporting random samples in the context of audits as well as reliable documentation of the audit procedures and evidence.
- Formulation of clear findings, cause and risk assessments as well as pragmatic recommendations for measures.
- Coordination of measures with providers and internal managers as well as monitoring of deadlines, evidence and sustainable elimination of defects.
- Preparation of target group-oriented audit reports, management and decision templates as well as escalations.
- Support in audits by internal audits, auditors and supervisory authorities.
Your Profile
- Several years of professional experience in provider auditing, outsourcing management, third-party risk management, IT audit, information security, compliance or risk management ideally in a regulated financial institutions.
- Knowledge of regulatory requirements for outsourcing and ICT third-party service providers, in particular DORA and MaRisk.
- Good understanding of IT and cloud operating models, internal control systems, information security and BCM processes.
- Experience in the evaluation of test reports, certifications, control certificates, SLAs and contractual audit rights.
- Strong analytical skills and a keen eye for risks, control gaps and robust evidence.
- Clear, precise and addressee-oriented communication; confident appearance towards providers, management and control functions.
- High degree of personal responsibility, integrity, assertiveness and pragmatic solution orientation.
- Fluent in written and spoken English.
- BIG PLUS: Audit experience with cloud and SaaS providers.
- BIG PLUS: Experience with significant outsourcing or critical or important ICT services as well as specialregulatory audits.
Our Benefits
- 30 days of vacation
- Employer-funded pension
- Flexible work
- Employee conditions
30 days of vacation; Employer-funded pension; Flexible work; Employee conditions; Digital learning; Diversity; Family & job friendly; Friendly work environment; Inspiring company culture; Work-life balance
The company
In Commerzbank Digital Technology Centre Prague, we are transforming a traditional bank into a digital agile enterprise! We provide a wide range of various IT solutions, .Net and Java development, services in the area of application operation and infrastructure. As a part of Commerzbank Group, we work closely together with the Delivery Organisation of more than 50 different Clusters in our Headquarter in Frankfurt and around the globe.
We are looking for thinkers with unconventional ideas and in return, we offer the freedom to create own job with own vision, wide range of benefits including home office. Sounds interesting?
Contact
In case of interest please apply via this job portal.
