Job
In this role, you will take independent oversight of ICT risks, conduct risk assessments, and provide challenges in areas such as information security and operational resilience.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- The Global Operational & Business Risk Management team is the independent second-line function responsible for overseeing operational and business risks across Allianz Global Investors. The team provides risk analysis, advice, and constructive challenge to the business and control functions across the organisation.
- The Senior ICT (Information & Communication Technology) Risk Manager plays a leading role in the independent oversight of ICT and digital risks across Allianz Global Investors. The role combines a sound understanding of technology with strong risk management judgement and translates complex ICT topics into clear risk assessments, management implications, and practical challenge.
- Lead independent second-line oversight and challenge of ICT risks across infrastructure, applications, information security, technology development and change, operations, resilience, and business continuity.
- Lead independent risk and control assessments, challenging first-line risk assessments, governance and control frameworks, as well as control design, implementation, and operating effectiveness.
- Monitor and assess the ICT risk profile using key risk indicators, incidents, deficiencies, and risk and control assessments; evaluate risk exposure against established risk appetite and tolerance thresholds, and escalate material concerns where appropriate.
- Provide independent risk input and challenge for material technology projects, transformations, and system changes, with a particular focus on resilience, security, critical business services, and client impact.
- Provide risk-based challenge of material technology architecture and cloud decisions, particularly where these may affect resilience, security, data protection, or third-party dependencies.
- Oversee ICT incidents from a second-line perspective, challenging impact assessments, root cause analyses, remediation activities, and lessons learned to identify systemic weaknesses and recurring risk themes.
- Review and challenge material findings from ICT security and resilience testing, including vulnerability assessments, penetration testing, and DORA-related testing, and oversee the risk-based remediation of identified weaknesses.
- Maintain awareness of the evolving cyber threat and technology landscape, including risks arising from cloud services, digitalisation, artificial intelligence, and external technology providers, and assess the implications for the ICT risk profile, resilience scenarios, and risk and control assessments.
- Develop and maintain ICT-related risk frameworks, control expectations, methodologies, and taxonomies, and contribute to the effective implementation of DORA and other relevant regulatory and internal requirements.
Our expectations of you
Education
- University degree in IT, Computer Science, Business, Economics, Finance, Risk Management or a related field, or equivalent relevant professional experience.
Qualifications
- Practical knowledge of ICT risk management and controls, including risk assessments, control design and effectiveness, scenario analysis, and key risk indicators.
- Strong understanding of ICT governance, information security, operational resilience, business continuity, third-party/cloud risk and technology change.
- Sound understanding of DORA and its implications for ICT risk, operational resilience, incident management and third-party risk.
- Familiarity with relevant control assurance and technology frameworks, such as ISAE 3402, SOC, COBIT, ITIL, ISO/IEC 27001 or the NIST Cybersecurity Framework.
- Strong analytical, communication, and stakeholder management skills, with the ability to translate complex technology topics into clear business and risk language.
- Independent, pragmatic and solution-oriented approach, with the ability to manage multiple priorities in an international environment.
- Excellent English; German or another European language is an advantage.
Experience
- At least 5 years of relevant professional experience in ICT/Technology Risk, Operational Risk, Information Security, Technology Audit, or a comparable risk/control function, ideally within financial services or another regulated environment.
- Experience assessing and challenging ICT risks, controls, incidents, deficiencies and remediation plans, and communicating material risks to senior stakeholders and governance committees.
- Additional advantages: Relevant certifications such as CISA, CRISC, CISSP or CISM, experience in asset management, and exposure to technology transformation, AI-related risks or frameworks such as COBIT, ITIL, ISO/IEC 27001 or NIST CSF.
What we offer
- We empower our employees by ensuring flexible work arrangements that maintain a balance between performance, productivity, career development and personal priorities (e.g., hybrid model/ flexible working hours).
- Securing your future: Access to company pension/savings plans.
- Family support (relocation/ childcare facilities).
- Company share purchase plan.
- Mental health and wellbeing programs.
- Mobility solutions (JobRad bike leasing, subsidized public transport pass).
- Career opportunities across the entire Allianz Group.
- Self-guided learning & development.
Benefits
Higher take-home pay
Health, fitness & fun
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Allianz is a great place to work for people who want to take initiative and grow within the company. With a strong global presence, Allianz is always looking for ways to improve and stay ahead of the competition. The company truly cares about its 85 million customers and 142,000 employees. Allianz fosters a culture of collaboration and innovation, where employees are encouraged to perform to the best of their abilities and challenge the status quo. If you're looking for an exciting and supportive work environment, Allianz is the place for you.
- 250+ Employees
- Established Company
- Onsite, Hybrid, Full Remote
- Banking, Finance, Insurance
Employer reviews
- Career growth
- 3.6
- Working conditions
- 4.0
- Team culture
- 3.5
- Engineering
- 3.0
More jobs
These jobs might also interest you
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...