(Senior) Manager IT – Operations & ICT Governance (m/f/d)

As our (Senior) Manager IT - Operations & ICT Governance (m/f/d), you own BIT Capital's entire IT operations and at the same time act as the operational interface to our ICT risk function (information and communication technology) under DORA (Digital Operational Resilience Act). Beyond that, you define and steer which IT-related responsibilities will run in-house going forward and what will be covered by external providers. In doing so, you hold overall responsibility for a complex IT infrastructure in our regulated environment and play a decisive part in shaping its further development. You report directly to Matthias Thom (Managing Director) and work in a lean set-up with short decision-making paths.

In your role, you focus on:

• The engine room. You are responsible for the stable, secure operation of our IT infrastructure: clients, network, as well as cloud and software-as-a-service services.
• Endpoint, identity & security management. You manage all IT endpoints and access rights, steer on- and offboarding, and ensure technical security: patch, vulnerability and backup management, monitoring and logging, as well as supporting security audits up to and including penetration tests.
• DORA & ICT risk interface. As operational ICT risk officer, you are the central point of contact for ICT risk topics, maintain the register of information on ICT third-party service providers, provide input for incident classification and reportable incidents, and support resilience, business continuity and recovery testing.
• Make-or-buy. You shape a hybrid sourcing model, decide where to draw the line between in-house operation and outsourcing, and manage IT service providers and cloud vendors.
• Building, not administering. You actively develop IT support, license management and the documentation of our IT landscape, and bring measures from ICT risk management to technical completion.
• AI implementation. As part of our AI-Everywhere project, you drive AI automation projects forward together with Carlos Bielsa (Chief AI Officer) and the business functions. In doing so, you ensure they run securely and DORA-compliantly in our regulated environment.

• Several years of experience in IT operations or IT administration, ideally in a regulated environment (a financial services background is an advantage).
• Sound knowledge of IT security: identity and endpoint management, networking fundamentals, vulnerability and patch management.
• Familiarity with DORA and standards such as ISO 27001 is a plus.
• Experience in managing external IT service providers as well as cloud/SaaS environments.
• A structured, documentation-oriented way of working and the ability to bridge technical IT and compliance/risk.
• A completed degree in (business) informatics or information security, or a comparable qualification.
• You communicate confidently in German and English.

• Are you looking for a pure strategy or oversight role with a team and the option to delegate? This position is deliberately hands-on: you implement things yourself – from client setup to the DORA register.
• Is regulation just tiresome overhead to you? As a company under BaFin supervision, documentation, controls and DORA requirements are an integral part of the role.

• You have a passion for equities, financial markets and technology.
• You work precisely and take ownership: you document responsibilities clearly and flag gaps proactively, without being asked to.
• You use AI tools as a matter of course in your daily work and consistently think about automation within your own area of responsibility.
• You get things done and don't wait for perfect conditions. A pure 9-to-5 mindset is not a fit for this role.

• End-to-end responsibility for the IT of a growing, regulated asset manager: you shape the infrastructure rather than merely administering it.
• A direct reporting line to Matthias (Managing Director) and short decision-making paths in a team of 40+ colleagues from 15 nations.
• Considerable creative freedom in building our hybrid IT model and in selecting tools and providers.
• An environment where the team is significantly invested in its own funds and technology is at the centre.