Head of Internal Audit, Risk & Compliance; m​/f​/d

q.beyond is the leading IT partner for SMEs. We solve the technological challenges our European customers face and make their business models fit for the future. This way, we sustainably enhance our customers’ business value. We do so by implementing sovereign IT solutions and drawing on our proprietary, certified AI data centres.

Our strong team of more than 1,000 specialists combines sector expertise with technical excellence. Core focuses of our activities include public and private clouds, operating business-critical applications based on Microsoft and SAP technologies, artificial intelligence, and IT security. Publicly listed, q.beyond is present across Germany and has locations in Latvia, Spain, Romania, India, and the USA.

• Augsburg
• Darmstadt
• Hamburg
• Cologne
• Leipzig
• Oberhausen
• Ulm

Internal Audit

• Responsible for planning, conducting and documenting audits of processes, controls, compliance requirements and the Internal Control System (ICS).
• Assessing the effectiveness and adequacy of governance, risk management and control processes.
• Preparing audit reports with clear findings and practical recommendations for improvement.
• Following up on the implementation of corrective measures and regularly reporting to executive management and supervisory bodies.

Group-Wide Risk Management (Section 91 of the German Stock Corporation Act – AktG):

• Independently managing, coordinating and continuously developing the Group-wide risk management system.
• Identifying, assessing and monitoring material risks, as well as developing and tracking measures to mitigate or prevent them.
• Regularly reporting to the Executive Board, executive management and Supervisory Board on the Group’s opportunities and risk exposure, including anticipated developments.

Data Protection:

• Responsible for ensuring compliance with the GDPR, the German Federal Data Protection Act (BDSG) and other applicable data protection requirements, in cooperation with the external Data Protection Officer.

Compliance:

• Responsible for further developing the established Compliance Management System.
• Supporting external audits in the areas of Information Security Management (ISM in accordance with ISO 27001 and C5), data protection, Business Continuity Management (BCM in accordance with ISO 22301) and Quality Management (QM in accordance with ISO 9001).
• Receiving, assessing and documenting incoming reports while ensuring confidentiality and whistle blower protection (internal reporting office); responsible for operating and further developing our whistleblowing system in accordance with the German Whistle blower Protection Act (HinSchG).
• Promoting a company-wide risk culture and establishing communication structures between the various compliance functions.
• Regularly coordinating with and reporting to internal and external stakeholders (e.g. the Supervisory Board and external auditors).

• Work-life balance
  :
  Flexible mix of working hours and work location (40% home office) for a harmonious work-life integration.
• Vacation entitlement
  : 30 days of vacation, special leave and a sabbatical account for restful time off and relaxation.
• Quality of life
  : private accident insurance, supplementary health insurance, extended sick pay and a company pension scheme. Focus on your mental health through the Fürstenberg Institute.
• Fitness promotion
  :
  Own Job Rad, virtual physiotherapy, various company running events.
• Career opportunities
  :
  Numerous certification opportunities via Udemy, Linkedin Learning and SAP Learning Hub.
• Professional and personal develop men
  t:
  Our internal Academy, monthly company Learning…