ICT Outsourcing and TPPM Officer

KEY RESPONSIBILITIES
• Maintain the outsourcing and information registers in accordance with DORA and ensure the quality, completeness and consistency of the underlying data.
• Perform second-line monitoring and controls across the ICT third-party lifecycle, including onboarding, risk assessment, contracting, ongoing monitoring, incident management, business continuity and exit arrangements.
• Support and challenge first-line KAMs through regulatory guidance, methodologies and practical coaching.
• Monitor compliance with applicable policies, due-diligence requirements, risk assessments, reporting obligations and remediation plans.
• Identify and escalate material ICT outsourcing risks, incidents, concentration risks, control weaknesses and overdue actions.
• Prepare and present ICT outsourcing reporting to the OBAM IRSC and the respective Management Bodies of ODDO BHF Asset Management GmbH and ODDO BHF Asset Management SAS.
• Support regulatory reviews and requests from Risk, Compliance, Internal Audit and external auditors, ensuring that evidence is complete and readily available.
• Develop and maintain policies, procedures and control standards in coordination with the relevant OBAM and Group functions.
• Drive the digitalisation and automation of ICT outsourcing controls and reporting, including the identification and implementation of relevant AI use cases. CANDIDATE PROFILE
• Typically, three to five years of relevant experience in ICT Outsourcing Controlling, Third-Party Provider Management, Third-Party Risk Management, ICT Risk or Non-Financial Risk Management within financial services.
• Sound knowledge of DORA and the ability to develop expertise across German and French regulatory environments.
• Strong analytical skills, attention to detail and the ability to work with complex data and control evidence.
• Ability to provide constructive challenge while working effectively with KAMs, business teams and control functions.
• Independent, reliable and well organised, with the ability to operate across entities and functions.
• Relevant university degree or equivalent qualification.
• Fluent English is mandatory and central to the role. A good command of French and/or German would be a strong advantage.
• AI-friendly mindset, with the ability to identify and apply relevant, controlled use cases for process automation, data quality and reporting.