Mahmoud Qaddoura
Anforderungsmanager @ZAM eG
Signup · Get unlimited contacts
WORK HISTORY
Anforderungsmanager @ZAM eG
As the central System Owner and functional Custodian at ZAM eG, I lead the end-to-end architecture, functional design, and process orchestration of a large-scale, multi-tenant SaaS platform (ForumITR). This enterprise platform ensures IT regulatory compliance (DORA, BAIT, MaRisk, ISO 27001) for over 750 banks within the German cooperative financial network. I act as the strategic bridge between regulatory compliance units, external software development providers (Atruvia/Forum), and affiliated banks. CORE RESPONSIBILITIES & SYSTEM ARCHITECTURE:• Requirements Engineering & API Design: Architecting detailed technical specifications (User Stories, Epics) for 3-tier architectures. Defining REST-API and JSON/CSV interfaces for the Data Integration Hub (DIH) to connect 3rd-party systems (e.g, ITSM, OpRisk).• Workflow Engineering 2.0: Designing dynamic, BPMN-based workflow engines. Specifying complex state machines, data-driven triggers, automated escalation matrices, and 4-eyes-principle Quality Gates across ISMS, BCM, and NSR modules.• Data Modeling & Inheritance Logic: Creating relational data models for ICT assets, processes, and GAPs. Developing complex algorithms for protection requirements (C-I-N-A) and Annual Risk Occurrence (JRE) using advanced \"Inheritance + Override\" mechanisms.• Compliance-by-Design: Embedding strict EU/BaFin regulatory frameworks directly into the software logic. Specifying modules for IT Contingency (BIA, RTO/RPO) and DORA-compliant ICT Incident Management.• IAM & RBAC: Engineering highly granular, multi-tenant Role-Based Access Control (RBAC) structures. Enforcing strict Segregation of Duties (SoD) across 30+ roles for ZAM, client, and provider GUIs.• Provider Steering & Defect Management: Directing external IT providers in agile setups, leading architectural workshops, and managing complex defect resolutions via Jira/ITSM.
EDUCATION
Damascus University
Bachelor of Applied Science - BASc, Applied Mathematics
ABOUT MAHMOUD QADDOURA
Cybersecurity and IT Governance specialist with extensive experience translating complex regulatory frameworks into practical technical implementations within financial institutions. My work focuses on bridging the gap between regulatory requirements (DORA, BAIT, NIS2, ISO 27001) and real-world IT architectures, enabling organizations to implement compliance-by-design systems and resilient cyber security frameworks. Throughout my career I have worked across banking, consulting, and enterprise environments, designing regulatory technology solutions, governance models, and ICT risk frameworks that support large-scale digital infrastructures. My experience includes: • Designing regulatory-driven IT platforms and compliance architectures • Translating regulatory frameworks into technical system requirements • ICT risk management and cyber resilience programs • DORA and BAIT implementation for financial institutions • Security governance and risk reporting to executive leadership • Development of compliance tools and regulatory automation platforms I have contributed to multiple cybersecurity and regulatory initiatives across financial institutions, including the design of platforms and tools supporting digital operational resilience and ICT risk management. My professional focus lies at the intersection of: IT Governance Cybersecurity ICT Risk Management Regulatory Technology (RegTech) I am particularly interested in leadership roles where regulatory transformation, cyber risk strategy, and technology architecture intersect.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.