Job Description

Your area of work:

The Chief ICT Risk Office (CISO) is where security meets the future of financial market infrastructure, and we are looking for someone to help shape it. As the second line of defence for Deutsche Börse Group, we do not just govern risk: we drive the innovation that makes a globally relevant exchange more resilient, more intelligent, and ahead of emerging threats. From post-quantum cryptography to cloud-native security governance, the CISO is where new ideas are stress-tested and turned into strategy. As a Cybersecurity Innovation & Agile Expert, you will be the operational engine behind that ambition: keeping delivery structured, ceremonies sharp, and the innovation radar active. You bring a software engineering background and proven agile experience, and you are ready to bring fresh thinking into one of the most consequential security functions in European capital markets.

Your responsibilities:

• You set and maintain the delivery rhythm of the unit, PI Planning, Sprint Reviews, Retrospectives, Inspect & Adapt, you prepare, facilitate, and follow up, ensuring the team operates with the precision a financial market infrastructure demands
• You manage and evolve the unit’s agile setup: Jira boards, Confluence structure, backlog hygiene, and OKR tracking from department vision down to team level, keeping objectives aligned across all unit workstreams
• You search and present information security innovations and support initiatives operationally, sandbox and garage formats, pilot coordination, documentation of outcomes, working closely with your counterpart (L2.tech) and the Head of ICT Risk
• You coordinate processes (evaluation, alignment with requestors, escalation), support unit communication formats (AIRR, CSB, Weekly, townhall preparation), and track metrics and KPI reporting
• You support developing our internal tools into valuable products, with clear KPIs, actionable outputs, and direct relevance for governance bodies and the broader Group ICT Risk community
• You represent the unit at conferences and external formats, and actively manage strategic partnerships (CSA PQC Working Group, AI Control Mapping, ECUC, AIUC), identifying relevant impulses and translating them back into unit initiatives

Your profile:

• You have a background in software engineering, you have developed and shipped software and understand how systems are built and deployed; this foundation is what makes your agile work credible to engineering teams
• You are genuinely curious about cybersecurity and financial market regulation, you do not need to be a security expert on day one, but you want to understand why it matters for a stock exchange operating under DORA
• You have at least 2-3 years of proven experience as a Scrum Master or Agile Lead, with a recognised certification (PSM, CSM, or equivalent) or demonstrable team-level responsibility in an engineering context
• You are a confident communicator with proven ability to present work and engage effectively with senior management and executive stakeholders
• You communicate with impact: you translate technical topics for non-technical audiences, facilitate formats that produce decisions rather than discussions, and write clearly enough for CISO-level audiences
• Experience with security-adjacent topics from your engineering background (application security, cloud, DevSecOps) is a plus; familiarity with GCP or agile at scale (SAFe, PI Planning in larger organisations) is welcome; proficiency in written and spoken English is required, German is an asset