Regulatory Resilience Lead (AI & DORA)

Since we are in 2026, the EU AI Act is now fully enforceable and DORA (Digital Operational Resilience Act) has become the gold standard for financial and tech startups in Berlin.

This role is more of a "Strategic GRC" position, focusing on systemic resilience and algorithmic accountability.

Job Title

Regulatory Resilience Lead (AI & DORA)

Intro

With the EU AI Act and DORA now in full effect, [Company Name] is looking for a Regulatory Resilience Lead to navigate the complex intersection of high-risk AI systems and financial-grade operational resilience. This isn't a "legal-only" role; you will be the architect of our compliance strategy, ensuring our AI products are ethically sound and our infrastructure is "battle-hardened" against systemic failures. You will work directly with our Engineering and Product leads to turn regulatory hurdles into a competitive trust advantage.

• Location: Berlin (Hybrid / Flex)
• Language: English (Fluent), German (Professional working proficiency preferred for regulator liaison).

• AI Governance Framework: Lead the classification of our AI models under the EU AI Act, managing the lifecycle of "High-Risk" systems, technical documentation, and bias-monitoring protocols.
• DORA Implementation: Oversee the five pillars of DORA, specifically focusing on ICT Risk Management and Third-Party Risk, ensuring our critical providers meet European resilience standards.
• Resilience Testing: Coordinate TLPT (Threat-Led Penetration Testing) and business continuity exercises to ensure we meet DORA’s operational "anti-fragility" requirements.
• Algorithmic Auditing: Partner with Data Science teams to perform "Conformity Assessments" and human-oversight audits for our customer-facing AI features.
• Regulator Liaison: Serve as the primary point of contact for the EU AI Office and BaFin, handling mandatory incident reporting and compliance filings.

Requirements

Expertise: 4+ years in GRC, Legal Tech, or Operational Risk, with a deep specialization in DORA and the EU AI Act.

Analytical Mindset: Ability to translate abstract legal articles into concrete Jira tickets for developers.

Industry Experience: Previous experience in Fintech, Insurtech, or Healthtech is highly preferred, as these sectors face the highest scrutiny under 2026 mandates.

Education/Certs: Background in Law or Tech-Policy. Certifications like CIPP/E or specialized AI Ethics credentials are a major plus.

Communication: Exceptional ability to manage stakeholders—you can explain "Model Transparency" to a developer and "ICT Concentration Risk" to a Founder.

Equity: Significant VSOP package; as a Lead role, you are a key stakeholder in our long-term stability.

Professional Development: Unlimited access to European regulatory summits and advanced AI governance certifications.

Berlin Culture: Monthly team "Stammtisch," a generous wellness stipend, and a bright, modern office in Neukölln or Mitte.