Your Role & How we work
As our Senior IT Operations Specialist (m/f/d), you build and run BIT Capital's corporate IT with your own hands, growing into the operational side of our ICT risk function under DORA (Digital Operational Resilience Act) as you go. You are the one person doing the hands-on work: you decide what you run yourself, what you automate, and what you hand to an external provider or buy as a product. In doing so, you hold end-to-end responsibility for the IT of a regulated asset manager and shape it rather than inherit it. You report directly to Matthias Thom (Managing Director) and work in a lean set-up with short decision-making paths.
In your role, you focus on:
The engine room. You are responsible for the stable, secure operation of our IT infrastructure: clients, network and Google Workspace.
Identity & endpoint management. You take us from manual user provisioning to SSO and group-based access, bring all endpoints under management, and turn on- and offboarding into a process that is scripted rather than remembered.
Security hygiene. Patch, vulnerability and backup management, monitoring and logging, and supporting security audits up to and including penetration tests.
Make, buy or outsource. You shape a hybrid sourcing model, decide where to draw the line between doing it yourself, buying a tool and outsourcing, and manage the IT service providers and cloud vendors you bring in.
Growing into DORA. You start as the operational point of contact for ICT risk topics (incl. ICT register, incident classification, business continuity and recovery testing). Over time, you take on risk assessment, compliance and regulatory reporting. We don't expect you to know DORA specifics on day one.
Building, not administering. You actively develop IT support, license management and the documentation of our IT landscape, and bring measures from ICT risk management to technical completion.
AI implementation. As part of our AI-Everywhere project, you drive AI automation projects forward together with Carlos Bielsa (Chief AI Officer) and the business functions.
The experience you bring
Several years of hands-on experience in IT operations, system administration or IT engineering, ideally in a company where you owned the whole stack rather than one slice of it.
Sound knowledge of identity and endpoint management (Google Workspace or comparable, MDM), networking fundamentals, and vulnerability and patch management.
You automate by default: scripting (Python, shell or similar) and infrastructure-as-code are tools you reach for before clicking through a console a second time.
Experience in managing external IT service providers as well as cloud/SaaS environments.
A structured, documentation-oriented way of working and genuine curiosity about the compliance and risk side of IT.
Familiarity with DORA, ISO 27001 or a regulated environment is a plus, not a prerequisite.
A completed degree in (business) informatics or information security, a comparable qualification, or a track record that speaks for itself.
You communicate confidently in German and English.
2 reasons why you should not apply
You want to lead a team and delegate technical challenges? This position is deliberately hands-on: you are our IT department, and you implement things yourself, from client setup to the DORA register.
Is regulation just tiresome overhead to you? As a company under BaFin supervision, documentation, controls and DORA requirements are an integral part of the role, and you will need to want to grow into them.
Your mindset
- You have a passion for equities, financial markets and technology.
- You work precisely and take ownership: you document responsibilities clearly and flag gaps proactively, without being asked to.
- You use AI tools as a matter of course in your daily work and consistently think about automation within your own area of responsibility.
- You get things done and don't wait for perfect conditions. A pure 9-to-5 mindset is not a fit for this role.
What we offer
- End-to-end responsibility for the IT of a growing, regulated asset manager: you shape the infrastructure rather than merely administering it.
- A direct reporting line to Matthias (Managing Director) and short decision-making paths in a team of 40+ colleagues from 15 nations.
- Considerable creative freedom in building our hybrid IT model and in selecting tools and providers.
- An environment where the team is significantly invested in its own funds and technology is at the centre.