ICT Risk Manager - EU
Hybrid from our Wiesbaden office
€85,000 - €100,000
About Us
Domestic & General is a leading provider of appliance care and protection solutions. We work with some of the world’s best-known manufacturers and retailers – helping millions of households keep daily life on track.
We’re more committed than ever to delivering exceptional customer service. And we’re championing a cost-smart, sustainable future – where repairing more means wasting less.
We operate in 12 markets, with a significant and growing presence in European markets.
About the Role
The Head of DORA & ICT Risk Management is responsible for designing, embedding, and governing the Digital Operational Resilience (DORA) framework across the EU business. The is a newly created role which provides leadership of ICT risk management, outsourcing oversight, regulatory engagement, incident governance, and digital resilience testing.
Key Responsibilities:
- Lead the design and continuous enhancement of the DORA-aligned ICT Risk Management Framework.
- Advise senior leadership and the Board on regulatory expectations and required remediation.
- Own and govern outsourcing and critical third‑party oversight aligned with DORA.
- Oversee incident classification, regulatory notifications, and remediation processes.
- Monitor material incidents and coordinate timely notifications and follow-up with BaFin and internal stakeholders.
- Produce Board‑level reporting and actionable risk insights.
- Support first-line owners of ICT and operational resilience risks, coordinating risk identification, assessment, mitigation, and control testing.
- Lead ICT Third Party management for DGIEU, ensuring third-party arrangements meet regulatory requirements and support resilience objectives.
- Own the DORA-aligned resilience strategy and drive a structured improvement programme that benchmarks maturity, delivers remediation, and supports Board-level review.
- Oversee externally and intragroup provided services, including contracts, monitoring, Register of Information, and exit plans, ensuring BaFin and DORA compliance.
- Collate and assess outcomes of digital resilience testing and periodic self-assessments of the ICT Risk Management Framework.
- Review and challenge risk assessments, service-level controls, and root-cause analyses, ensuring corrective actions are implemented.
- Produce clear, data-driven reporting for senior management and the Board, highlighting key risks, control gaps, and strategic remediation actions.
- Support regulatory communications and drive continuous improvement to enhance operational resilience maturity.
- Drive cultural uplift in digital resilience across the enterprise.
Required Skills and Experience:
Deep understanding of DORA, ISO27001, ISO27005, BSI German IT Standard, NIS2, EBA guidelines, or EU regulatory frameworks.
Proven experience of engaging with BaFin on incident reporting and regulatory matters.
High level of German and English language skills.
Exceptional communication and senior‑level influencing skills.
Strong analytical and problem‑solving capability.
Ability to operate in highly regulated, complex digital environments.
Leadership experience with distributed or virtual teams.
Experience in financial services or insurance sectors (preferred).
Benefits:
- Competitive salary.
- Company Pension Scheme
- Participation in our Group Bonus scheme.
- Everyday Flexibility - where you have the opportunity to choose your preferred place of work every day - home or office.
- Free Domestic & General Policy on a qualifying Appliance of your choice and 50% discount on further policies you purchase.
- 25% discount on policies for your family and friends
At Domestic & General, we’re committed to creating an inclusive workplace where everyone feels welcome. We want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if you don’t, we’d still encourage you to apply.
Domestic & General is an equal opportunities employer, which means we treat people fairly and welcome applications from all suitably skilled individuals regardless of gender, age, race, disability, ethnic background, religion or belief, sexual orientation, gender reassignment, or marital/family status.
At Domestic & General, we are proud of our 100-year legacy and excited about our future growth plans. We are expanding our horizons, entering new markets and territories internationally and we need your expertise to help us on the journey.
Skills Required
- Deep understanding of DORA, ISO27001, ISO27005, BSI German IT Standard, NIS2, EBA guidelines or EU regulatory frameworks
- Proven experience of engaging with BaFin on incident reporting and regulatory matters
- High level of German and English language skills
- Exceptional communication and senior-level influencing skills
- Strong analytical and problem-solving capability
- Ability to operate in highly regulated, complex digital environments
- Leadership experience with distributed or virtual teams
- Experience in financial services or insurance sectors
What We Do
We’re Domestic & General, the appliance care experts. We look after the things people rely on every day to keep their homes running. In fact, we protect, repair and care for millions of products and appliances each year – from fridges and washing machines to TVs and boilers. We’ve also been in business since 1912. (So our customers know they're in safe hands.)
