DORA/VAIT compliance and information security management

An additional role is being established within a software team at one of the world's largest insurers to ensure that information security management processes, cybersecurity standards for the product team's web-based business applications, as well as the cybersecurity guidelines and processes established within the group for the continuous maintenance of DORA/VAIT compliance within the software lifecycle of individual software, are always adhered to and optimized. The team-specific role interacts with cross-team role managers in the process and acts as an interface to the outside world and actively within the product team. It includes, among other things, the organization and implementation of penetration tests, knowledge transfer on best practices in IT security within web-based applications, creation of appropriate awareness, and ensuring the mandatory documentation and verification processes within the framework of software projects.