Regulatory Resilience Lead (AI & DORA)

Since we are in 2026, the EU AI Act is now fully enforceable and ** DORA** (Digital Operational Resilience Act) has become the gold standard for financial and tech startups in Berlin.

This role is more of a "Strategic GRC" position, focusing on systemic resilience and algorithmic accountability.

Job Title

Regulatory Resilience Lead (AI & DORA)

Intro

With the EU AI Act and DORA now in full effect, [Company Name] is looking for a Regulatory Resilience Lead to navigate the complex intersection of high-risk AI systems and financial-grade operational resilience. This isn't a "legal-only" role; you will be the architect of our compliance strategy, ensuring our AI products are ethically sound and our infrastructure is "battle-hardened" against systemic failures. You will work directly with our Engineering and Product leads to turn regulatory hurdles into a competitive trust advantage.

• Location: Berlin (Hybrid / Flex)
• Language: English (Fluent), German (Professional working proficiency preferred for regulator liaison).

Tasks

• AI Governance Framework: Lead the classification of our AI models under the ** EU AI Act **, managing the lifecycle of "High-Risk" systems, technical documentation, and bias-monitoring protocols.
• DORA Implementation: Oversee the five pillars of DORA, specifically focusing on ** ICT Risk Management** and ** Third-Party Risk **, ensuring our critical providers meet European resilience standards.
• Resilience Testing: Coordinate ** TLPT (Threat-Led Penetration Testing)** and business continuity exercises to ensure we meet DORA’s operational "anti-fragility" requirements.
• Algorithmic Auditing: Partner with Data Science teams to perform "Conformity Assessments" and human-oversight audits for our customer-facing AI features.
• Regulator Liaison: Serve as the primary point of contact for the ** EU AI Office** and ** BaFin **, handling mandatory incident reporting and compliance filings.

Requirements

Requirements

Expertise: 4+ years in GRC, Legal Tech, or Operational Risk, with a deep specialization in ** DORA** and the ** EU AI Act **.

Analytical Mindset: Ability to translate abstract legal articles into concrete Jira tickets for developers.

Industry Experience: Previous experience in ** Fintech, Insurtech, or Healthtech** is highly preferred, as these sectors face the highest scrutiny under 2026 mandates.

Education/Certs: Background in Law or Tech-Policy. Certifications like ** CIPP/E** or specialized ** AI Ethics** credentials are a major plus.

Communication: Exceptional ability to manage stakeholders—you can explain "Model Transparency" to a developer and "ICT Concentration Risk" to a Founder.

Benefits

Equity: Significant ** VSOP package **; as a Lead role, you are a key stakeholder in our long-term stability.

Professional Development: Unlimited access to European regulatory summits and advanced AI governance certifications.

Berlin Culture: Monthly team "Stammtisch," a generous wellness stipend, and a bright, modern office in Neukölln or Mitte.