Identity & Access Specialist (f/m/d)

As a core pillar of the Group Security department, the Identity & Access Management Section is safeguarding corporate assets by ensuring that access to resources is granted exclusively to authorized individuals, at the appropriate times, and solely for legitimate business purposes. The section is responsible for managing the end-to-end lifecycle of all digital identities across the group, covering full-time employees, external contractors and automated system accounts. Additionally, the IAM Section establishes and governs systematic access certification processes, enabling system and data owners to perform regular audits and re-authorize user permissions, thereby maintaining continuous alignment with regulatory compliance and industry standards requirements.

Your area of work:

The Identity & Access Governance Specialist is responsible for governing, maintaining and continuously enhancing Deutsche Börse Group's authorization concept and role management framework. Acting as Business Owner for the Nexis platform, she or he ensures that business roles, authorization concepts and related governance processes are aligned with regulatory requirements, internal policies and industry best practices.

The role serves as a key interface between business units, technology teams, auditors and external service providers, ensuring that access governance controls are effectively implemented, documented and monitored across the organization. A strong focus lies on the continuous improvement of user experience, process efficiency and automation capabilities within the Identity Governance and Administration landscape.

In addition, the specialist supports and leads strategic initiatives and projects related to Identity & Access Management, drives the adoption of innovative technologies including AI-enabled capabilities, and ensures that all governance processes, procedures and documentation remain accurate, audit-ready and compliant within Deutsche Börse Group's highly regulated environment.

Your responsibilities:

• Act as Business Owner for the Nexis authorization concept management platform and ensure its effective governance, continuous improvement, and alignment with business and regulatory requirements
• Define, maintain, and enhance enterprise-wide authorization concepts and business roles management processes across Deutsche Börse Group
• Ensure compliance with regulatory requirements, internal policies, audit expectations, and security standards through effective governance controls and monitoring activities
• Collaborate with business units, application owners, and infrastructure teams to ensure authorization concepts, business roles, and access controls are designed, documented, and maintained in accordance with regulatory and internal governance requirements
• Drive the continuous optimization of the Nexis platform, including process automation, user experience improvements, and the adoption of AI-enabled capabilities
• Coordinate and support internal and external audits, manage audit-related activities, and ensure timely remediation of findings and recommendations
• Act as a trusted advisor on Identity Governance and Authorization Management topics, effectively communicating requirements, risks, and strategic initiatives to stakeholders at all organizational levels
• Maintain and continuously update governance-related documentation, procedures, process descriptions, controls, and written rules
• Identify opportunities for process improvements and operational efficiencies within the Identity Governance and Administration landscape
• Contribute to Identity & Access Management related projects and initiatives and, where required, assume responsibility for project workstreams or project management activities

Your profile:

• Bachelor’s or Master’s degree in Information Technology, Management and Engineering, Industrial Engineering, Information Security, or a comparable discipline
• Minimum of 6 years of professional experience in Identity and Access Management, Identity Governance and Administration, and authorization concept management
• Proven experience in designing, implementing, and governing role-based access control models, Segregation of Duties frameworks, access governance controls, and enterprise authorization concepts
• Experience with industry-standard access governance solutions such as SailPoint IdentityIQ, SailPoint Identity Security Cloud, Nexis, Omada, Saviynt, or comparable platforms
• Strong understanding of access governance principles, including role lifecycle management, access controls, policy enforcement, and regulatory compliance requirements.
• Strong understanding of Identity Governance frameworks, regulatory requirements, and control environments within highly regulated industries
• Experience working with internal and external auditors, including support of audits, control assessments, and remediation activities
• Strong understanding of Configuration Management Systems, enterprise infrastructure landscapes, and the relationships between applications, infrastructure assets like servers, databases, network zones, and other technology components
• Proven ability to create, maintain, and improve governance documentation, procedures, policies, and audit-relevant process documentation
• Strong stakeholder management skills with the ability to confidently present, influence, and drive governance initiatives across technical and business functions
• Practical experience leveraging Artificial Intelligence technologies to enhance processes, efficiency, and user experience
• Solid handling of MS Office applications
• Proactive thinking and self-driven approach to solution development
• Strong analytical, problem-solving, presentation, and documentation skills
• Experience in project delivery and test management would be an advantage
• Fluent in English; German would be an advantage