IT GRC Specialist (m/f/d)

About us

At AND-E, we're redefining the future of mobility insurance. As part of the global MS&AD Group and in close partnership with Toyota, we aim to make tomorrow's journeys simpler, safer, and smarter. Our expertise spans over 30 markets in Europe and South Africa, providing tailored insurance solutions for Toyota and Lexus customers and various white-label partners. In Germany, our offerings include motor insurance, commercial fleet coverage, payment protection insurance, and support for Japanese businesses operating abroad.

Our commitment extends beyond business: at AND-E we support our people to grow, make a difference for customers, and help shape the future of connected mobility protection.

Cultural Fit

Are you passionate about governance, risk, and compliance in the IT industry? Do you enjoy translating regulatory requirements such as DORA, ISO 27001, and the GDPR into practical, actionable frameworks? Is connecting stakeholders across IT, compliance, and auditing where you shine? Then welcome to AND-E.

How you'll make an impact

• Strengthen and continuously improve AND-E's IT Governance, Risk & Compliance (GRC) framework across Europe.
• Coordinate and maintain governance processes, policies, standards, and procedures to ensure compliance with internal and external requirements.
• Perform IT and cyber risk assessments and maintain the IT Risk Register.
• Drive the implementation of the ICT Risk Management Framework in line with DORA, ISO 27001, and industry best practices.
• Coordinate IT control testing, assurance activities, and evidence collection, and support internal/external audits and remediation efforts.
• Prepare governance reporting, KPIs, KRIs, and presentations for senior management and governance committees.

What it takes to succeed in this role