ICT Outsourcing and TPPM Officer

About the role

This role covers ICT outsourcing oversight and third-party provider management within asset management. It involves maintaining outsourcing registers, performing second-line monitoring and controls across the third-party lifecycle, supporting first-line key account managers, preparing reporting to the OBAM IRSC and the management bodies of ODDO BHF Asset Management GmbH and SAS, and driving the digitalisation and automation of controls.

Key responsibilities

• Maintain the outsourcing and information registers in line with DORA, ensuring the quality, completeness and consistency of the underlying data.
• Perform second-line monitoring and controls across the ICT third-party lifecycle: onboarding, risk assessment, contracting, ongoing monitoring, incident management, business continuity and exit arrangements.
• Support and challenge first-line KAMs through regulatory guidance, methodologies and practical coaching.
• Monitor compliance with policies, due-diligence requirements, risk assessments, reporting obligations and remediation plans.
• Identify and escalate material ICT outsourcing risks, incidents, concentration risks, control weaknesses and overdue actions.
• Prepare and present ICT outsourcing reporting to the OBAM IRSC and the respective management bodies of ODDO BHF Asset Management GmbH and SAS.
• Support regulatory reviews and requests from Risk, Compliance, Internal Audit and external auditors, keeping evidence complete and available.
• Develop and maintain policies, procedures and control standards with OBAM and Group functions.
• Drive the digitalisation and automation of controls and reporting, including AI use cases.

Required profile

• Typically three to five years of experience in ICT Outsourcing Controlling, Third-Party Provider Management, Third-Party Risk Management, ICT Risk or Non-Financial Risk Management within financial services.
• Relevant university degree or equivalent qualification.
• Fluent English is mandatory; a good command of French and/or German is a strong advantage.
• Ability to work independently, reliably and well organised across entities and functions.

Required skills

• Sound knowledge of DORA and the ability to develop expertise across German and French regulatory environments.
• Strong analytical skills, attention to detail and ability to work with complex data and control evidence.
• AI-friendly mindset, able to identify and apply controlled use cases for process automation, data quality and reporting.