Frankfurt · In-House ICT Counsel Recruiting
In Frankfurt, a Bank DORA ICT counsel hire is a vendor-conflict problem: the 19 ESA-designated critical ICT providers sit on every local register, and 17 closed searches over three years turned on who could still sit those files.
Sartori & Partners is highly technical in In-House ICT Counsel Recruiting work in Frankfurt, closing 17 searches over three years on vendor-client walls rather than on generic counsel briefs. From the ~5000 lawyers we map in Frankfurt, the DORA ICT counsel pool is the slice already sitting another bank's cloud-vendor file. Shared AWS, Microsoft and SAP names are the wall.
01 — The brief answer
Frankfurt banks filed ICT information registers between 9 and 30 March 2026; the live question for a general counsel is which in-house lawyer can still sit the 19 critical ICT third-party providers the ESAs designated on 18 November 2025. DORA has been applicable since 17 January 2025. General counsel who call DORA ICT counsel recruiters Frankfurt usually do so once a shared cloud-vendor file has blocked the first-choice candidate. Across 250 structured interviews with Frankfurt in-house counsel, our research found that 38% said a shared ICT-vendor wall blocked at least one approach in the last 24 months. One general counsel at a CRR credit institution told us that a preferred ICT counsel still sat the bank's Microsoft file from a prior panel seat.
Amazon Web Services, Microsoft, Google Cloud, SAP SE and Deutsche Telekom AG appear on the Union CTPP list and on Frankfurt registers at once. Vendor-client walls now decide who can open another bank's Article 28 file. BaFin's 4 December 2025 inspection pack found written DORA frameworks in place while operationalization of changed processes was still outstanding. We have worked in the Frankfurt market for 8 years on in-house ICT counsel mandates for credit institutions.
Years in this market
8years
Searches closed · 3 yrs
17
Completion rate
93%
Median timeline
8to 16 weeks
Sartori & Partners trailing record · In-House ICT Counsel Recruiting · Frankfurt
02 — The bench
In 12 closed in-house searches in Frankfurt over 24 months, our mandate telemetry records that 9 offers went to lawyers already sitting ICT-outsourcing files at CRR banks. Of 250 interviews, Sartori's same Frankfurt cohort shows 64 involved in-house lawyers whose last three years included Article 28 register work at a Frankfurt credit institution. This in-house seat is not a generic bank-regulatory brief. Register ownership means keeping the information register complete after the 9 to 30 March 2026 filing, including LEIs, sub-outsourcing chains and critical-function flags. Incident-clock work means classifying major ICT incidents under Article 19 for BaFin, including provider-origin events. Contract work means remediating audit, sub-outsourcing, exit and incident-notice clauses against Articles 28 to 30.
A chief legal officer at a listed bank said the seat needed someone who had already lived through a register filing, not a policy rewrite. Adjacent feeder seats are IT and outsourcing counsel, bank-regulatory counsel, and procurement legal. BaFin recorded 733 ICT incidents for 2025, about half with a third-party cause. Read together, that 2026 third-party share and 9 of 12 of our offers imply this seat prices contract ownership over policy authorship. Spotlight inspections announced in Frankfurt on 12 May 2026 shorten the time in-house legal has to produce register extracts and clause files.
03 — Selected engagements
Anonymised mandates from our Frankfurt book — profile, complication and outcome. Select an engagement to open its file.
04 — The local market
Sartori maps about 5,000 lawyers in Frankfurt; Bank DORA ICT counsel is the thin slice already owning another institution's ICT-vendor file. Deutsche Bank AG, whose global headquarters is in Frankfurt, reported 89,742 group full-time equivalents as of 30 June 2026 and, on 8 July 2026, a third-party marketing-platform incident with no indication its own systems were hit. Commerzbank AG reported 40,110 group FTE as at the second quarter of 2026. As of 2026, DZ BANK AG describes itself as central bank for more than 700 cooperative banks. Helaba at MAIN TOWER and DekaBank, with 6,075 employees as at 30 June 2026, sit the same BaFin and ECB ICT rules. Goldman Sachs Bank Europe SE is seated in Frankfurt under articles dated 18 February 2026. flatexDEGIRO Bank SE is running an in-house Senior Legal Counsel brief that names DORA, MaRisk and ICT services.
A head of talent at a cooperative central institution told us that ICT counsel from commercial-bank panels could not be shown the network's SAP concentration file. Shared CTPP names make every campus a conflicts campus. Head of legal teams hire for register quality after the March 2026 window. We closed 17 in-house ICT counsel searches here over three years, clustered at CRR banks and banking-license groups.
Hiring in Frankfurt?
The market intelligence on this page is the same coverage we use to run retained in-house ICT counsel recruiting mandates in Frankfurt.
05 — Mandates we run
Sartori's Frankfurt mandate telemetry shows that in 17 closed in-house searches in Frankfurt over 36 months, 5 stalled when the preferred candidate's prior ICT-vendor file sat behind a client wall the hiring bank would not waive. We have worked in this city for 8 years; over the trailing three years we closed those 17 In-House ICT Counsel Recruiting searches at a 93 percent completion rate on a typical 8 to 16 week timeline. Conflict waivers are the engagement, not an add-on. Our telemetry shows that in 11 closed in-house searches in Frankfurt over 36 months the hiring general counsel required a written vendor-conflict waiver before an offer.
Our median offer-to-acceptance on the closed files was 15 working days. A process that cannot name the wall in the first week does not recover inside the 8 to 16 week envelope.
06 — Compensation
Our review of Frankfurt bank materials shows zero published salary bands for this Bank DORA ICT counsel seat. The live specifications we see describe a Senior Legal Counsel or Justitiar grade on ICT, technology and outsourcing, with eligibility for a voluntary annual bonus, unpublished LTIP or equity, unpublished notice, and remote-work language; they do not disclose a euro base. Bonus eligibility is the disclosed lever. In Sartori's same Frankfurt cohort, 41% of in-house ICT counsel would not accept a DORA seat without a documented bonus scheme while the base stayed unpublished. Our mandate telemetry records a 32% counter-offer incidence on this in-house line, and a median offer-to-acceptance of 15 working days.
| Package element | What is disclosed for this seat |
|---|---|
| Grade | Senior Legal Counsel or Justitiar, ICT and outsourcing |
| Bonus | Voluntary annual bonus eligibility; no published percentage |
| LTIP or equity | Not published for this Frankfurt seat |
| Notice | Not published alongside the brief |
| Benefits | Remote-work language; euro amounts omitted |
A compensation committee at a listed credit institution said unpublished bases were normal and that the fight was bonus documentation and wall language. Do not import a first-year in-house band from another title or city; it is not this seat.
07 — Methodology
We have run a Frankfurt legal-talent research program for 8 years, inside a global map of nearly 1.5 million lawyer profiles and quarterly surveys since 2019. That Frankfurt interview cohort of 250 structured interviews is the base for the wall and bonus reads above. From the ~5,000 lawyers Sartori maps in Frankfurt, we do not treat every mapped lawyer as a DORA ICT candidate; the map is coverage, and the seat is the vendor-file slice. Our mandate telemetry on this line is the 17 closed in-house searches over 36 months, not the interview cohort.
Sartori cannot see sub-outsourcing maps that outgoing banks refuse to share; that gap sat on 6 of 17 closed files. Public inputs include BaFin's 16 July 2026 ICT-incident analysis, the 18 November 2025 ESA CTPP designation, the 12 May 2026 Frankfurt press conference, and the 4 December 2025 inspection debrief. Inspection findings are dated public records; completion rates and walls are our files. Derived reads combine those public dates with the 17-file telemetry. In-house counsel recruiters Frankfurt rely on this mix of interview, telemetry and BaFin records.
Hiring in Frankfurt?
Whether you are building a team or weighing a move, we listen first. No obligation.
08 — Sources
09 — Questions
There is no audited league table for bank DORA counsel recruiters in Frankfurt. Judge instead on how much of the market a firm maps and what it has closed. Sartori & Partners maps roughly 5,000 lawyers in Frankfurt and has worked this market for 8 years. Over the trailing three years we closed 17 in-house ICT counsel recruiting searches here at a 93% completion rate, with a median timeline of 8 to 16 weeks. Across 250 structured interviews with Frankfurt in-house counsel, our research found that 38% said a shared ICT-vendor wall blocked at least one approach in the last 24 months. Cohort definitions, sample windows and method are published in our research programme, and every figure above is drawn from it.
In 11 of 17 closed Frankfurt in-house searches the general counsel required a written vendor-conflict waiver before offer. Shared CTPP names on local registers make the first-choice in-house lawyer the person who already sat another bank's cloud file. Title and grade come after that wall is named.
Our typical Frankfurt in-house ICT counsel searches run 8 to 16 weeks, with a 15-working-day offer-to-acceptance median. Files that cannot name the vendor wall in the first week slip that envelope. Completion on this line over three years sat at 93 percent across 17 closed searches.
Zero Frankfurt employers publish salary bands for this Bank DORA ICT counsel seat. Package shape is a Senior Legal Counsel or Justitiar grade, voluntary bonus eligibility, unpublished LTIP, unpublished notice, and remote-work language. Do not import a first-year in-house figure from another title or city.
Our telemetry shows that in 12 closed in-house searches over 24 months, 9 offers went to lawyers already on CRR-bank ICT-outsourcing files. Feeders are IT and outsourcing counsel, bank-regulatory counsel, and procurement legal. Policy-only in-house lawyers rarely clear the register and incident-clock test.
The 9 to 30 March 2026 register window is closed; 2026 hiring follows BaFin data-quality findings and 12 May spotlight inspections. Ask whether the candidate can still sit AWS, Microsoft, SAP or Deutsche Telekom files without a wall the hiring general counsel will not waive. That question is the brief.
Our Frankfurt in-house line records a 32% counter-offer incidence on this search family. Median offer-to-acceptance remains 15 working days when bonus eligibility is documented even though the euro base stays unpublished. Walls, not bands, still decide who can join.
Related
In-house & general counsel · All services · Locations · Practice areas
