Technology Jobs

OT Penetration Tester  Location: Nordrhein-Westfalen (NRW)  Our client is seeking an OT Penetration Tester to support the security of operational technology and industrial control system environments. This role offers hands-on exposure to OT security testing, industrial networks and cyber resilience initiatives within critical operational environments. Key Responsibilities: Conduct penetration testing and security assessments across OT, ICS and SCADA environments. Assess industrial networks, segmentation controls and OT/IT convergence zones. Identify vulnerabilities and deliver risk-focused security reporting. Support remediation planning with engineering and operational stakeholders. Contribute to threat modelling, red team exercises and security simulations. Advise on OT security and compliance frameworks including IEC 62443, NIS2 and KRITIS requirements. Support the development of internal methodologies, tooling and testing processes. Your Profile: Experience within OT/ICS penetration testing or industrial cyber security environments. Strong understanding of industrial protocols and OT network architectures. Familiarity with OT security tools and vulnerability assessment methodologies. Knowledge of OT-related compliance and regulatory frameworks. Strong analytical and communication skills. Ability to work independently within complex operational environments. Strong German and English language skills. What’s on Offer? Flexible hybrid working environment. Access to advanced OT and security testing environments. Training and certification support. Opportunity to work on critical infrastructure and industrial security projects. Collaborative and security-focused company culture.

Group Information Security Manager  Location: Munich A leading financial services organisation is seeking a Group Information Security Manager to support and further develop its enterprise-wide information security programme. This role offers broad responsibility across information security governance, risk management and regulatory compliance within a complex international environment. Key Responsibilities: Support and further develop the group-wide Information Security Management System (ISMS). Define and maintain information security policies, standards and governance frameworks. Lead information security risk and compliance activities across the organisation. Support compliance with regulatory frameworks including DORA, BAIT, MaRisk, NIS2 and GDPR. Collaborate with Risk, Compliance, Legal and IT teams on security-related initiatives. Oversee operational security topics including incident response, vulnerability management and third-party risk. Support audits, regulatory reviews and reporting activities. Lead security awareness and training initiatives across the organisation. Your Profile: Significant experience within information security, cyber risk or security governance functions. Strong understanding of ISMS frameworks and enterprise security governance. Knowledge of financial services regulations and security frameworks including ISO 27001 and NIST. Experience working within regulated and complex organisational environments. Strong analytical, communication and stakeholder management skills. Strategic and solution-oriented mindset. Fluent German and strong English language skills. What’s on Offer? Senior role with broad organisational exposure. International and collaborative working environment. Opportunity to shape and enhance enterprise security initiatives. Flexible hybrid working model. Competitive compensation and long-term career development opportunities.

Business Continuity Management Expert Location: Frankfurt am Main A leading financial institution is seeking a Business Continuity Management Expert to support and further develop its group-wide operational resilience and BCM framework. This role offers broad exposure to regulatory, operational and crisis management topics within a highly regulated international environment. Key Responsibilities: Support and further develop the group-wide Business Continuity Management framework. Conduct business impact analyses, risk assessments and continuity planning activities. Maintain and improve BCM policies, processes and governance structures. Coordinate crisis management, continuity testing and recovery exercises. Support compliance with regulatory requirements including DORA, MaRisk and EBA guidelines. Collaborate with IT, Risk, Compliance and operational teams on resilience-related initiatives. Support audits, regulatory reviews and reporting activities. Deliver BCM awareness and training initiatives across the organisation. Your Profile: Significant experience within Business Continuity Management, operational resilience or related risk functions. Strong understanding of BCM frameworks, continuity planning and crisis management processes. Knowledge of financial services regulatory requirements including DORA and MaRisk. Experience working within regulated and complex environments. Strong analytical, organisational and stakeholder management skills. Structured and solution-oriented working style. Fluent German and strong English language skills. What’s on Offer? Senior specialist role with broad organisational exposure. International and collaborative working environment. Opportunity to shape operational resilience and BCM initiatives. Flexible hybrid working model. Competitive compensation and long-term development opportunities.

Threat Intelligence Expert Frankfurt  We are seeking a Threat Intelligence Business Expert to join the Cyber Security Division of a leading financial service provider in Frankfurt. You will be responsible for delivering high-quality intelligence products, engaging with internal security teams, and contributing to the company’s intelligence-led security posture across a fast-moving and complex threat environment. Key Responsibilities  Produce tactical, operational, and strategic threat intelligence products for technical and non-technical audiences including SOC, Incident Response, Risk, and senior management. Analyse threat actor activity targeting the financial sector Manage and optimise threat intelligence feeds and platforms, supporting integration with SIEM and SOAR tooling. Engage with internal stakeholders across Vulnerability Management, Red Team, and Compliance to ensure intelligence drives operational outcomes. Support DORA-aligned ICT risk reporting and contribute to the continuous improvement of intelligence processes and workflows. Key Requirements  5–7 years of cyber security experience Strong knowledge of the threat landscape relevant to financial institutions, including e-crime, ransomware, fraud, and account takeover. Proficiency with the MITRE ATT&CK framework and structured analytic techniques. Awareness of DORA and BaFin regulatory expectations for cybersecurity within EU financial institutions. Relevant certifications desirable: CREST CTIA, GIAC GCTI (FOR578), or equivalent. Fluent in both German and English  

Technical Vulnerability Management Expert | Germany Our client is a major European bank looking for a Technical Vulnerability Management Expert to join their growing Cyber Hygiene function. This is a hands-on technical role with end-to-end ownership of vulnerability management topics, working closely with internal stakeholders across the organisation. The role is based in Germany with quarterly travel to a European office. Key Responsibilities Own and drive technical vulnerability management topics end-to-end. Define and establish clear technical interfaces across internal workstreams. Analyse and interpret vulnerability reports and translate findings into actionable recommendations. Support system hardening and patch management processes. Collaborate with and onboard new technical domains into the vulnerability management framework. Drive requirements engineering in an agile environment. Coordinate small-scale technical projects across internal and external stakeholders. Your Profile Deep technical expertise in vulnerability management, ideally including system hardening and patch management. Strong understanding of open-source vulnerability tooling and CVE analysis. Familiarity with regulatory requirements relevant to vulnerability management. Able to communicate technical topics clearly to both technical teams and management. Comfortable working independently in a build-out environment. Experience in agile working methods and requirements engineering. Fluent German and English.

  Senior IAM Architect Our client is a large international organisation seeking an Enterprise Security Architect to join their Group Information Security function, with a focus on Identity and Access Management. You will sit within the Security Architecture department, responsible for the domain-specific development and ongoing enhancement of a group-wide security architecture, with the goal of ensuring and continuously improving IT security and cyber resilience across the organisation. Key Responsibilities: Analyse cybersecurity IAM trends relevant to the organisation, including regulatory developments and emerging technologies such as AI, Cloud and Non-Human Identities Produce IAM-specific risk assessments as part of technical security architecture design, covering cost, benefit and risk reduction Evaluate IAM threat scenarios and design high-level IAM security architectures, including standards, baselines and reusable artefacts such as patterns and blueprints Drive stakeholder alignment and steer solution design and implementation as subject matter expert, including presenting in group-wide security forums Assess IT security posture against best practices and provide actionable recommendations aligned to ISO and NIST frameworks Your Profile: Degree in Computer Science or a comparable qualification Extensive experience in the Identity and Access Management domain, ideally including proven delivery of IAM architecture within large organisations Strong background in security architecture roles, covering both technology-specific and enterprise-level architecture including target state definition and roadmaps Hands-on experience with IAM platforms and tooling, ideally including: IAM: Microsoft Entra ID / Active Directory, Ping Identity, Okta PAM: CyberArk / BeyondTrust IGA: SailPoint / Oracle OIG Zero Trust: NIST 800-207 Understanding of attacker mindset and offensive security; certifications such as OSCP, CEH or equivalent are advantageous Ability to work independently and take ownership of complex technical topics Strong problem-solving mindset with a structured, solution-oriented approach Fluent in English; German language skills are an advantage