Job
In this position, you assess and monitor ICT risks, enhance the risk management framework, and support the implementation of regulatory requirements like DORA. You create risk reports and promote a security culture within the organization.
This listing has been machine translated. Show original
Your role in the team
- As an ICT Risk Officer (m/f/d), you will actively shape the further development of our ICT risk management and contribute to sustainably strengthening our digital resilience.
- They assess and monitor ICT risks, question existing controls, and work closely with various departments and stakeholders.
- Thereby, you combine regulatory requirements with a pragmatic view of our business and especially support us in implementing DORA.
- Further development and maintenance of the ICT risk management framework as well as the associated policies, methods, and standards.
- Identification, assessment, and monitoring of risks in the areas of information security, cybersecurity, IT operations, and ICT third-party service providers.
- Conducting ICT risk analyses and supporting the integration of ICT risks into the enterprise-wide risk management.
- Maintenance of the ICT risk register as well as monitoring of measures, risk acceptances, and relevant control activities.
- Independent assessment and challenge of the First Line of Defense regarding key ICT risks and controls.
- Assessment of the appropriateness and effectiveness of security and control measures.
- Support of critical ICT incidents and relevant measures to strengthen operational resilience.
- Support in implementing regulatory requirements, particularly related to DORA, resilience testing, and ICT third-party risks.
- Development and monitoring of relevant Key Risk Indicators (KRIs) and Key Control Indicators (KCIs).
- Preparation of meaningful ICT risk reports for management and relevant governance bodies.
- Support during internal and external audits as well as regulatory inquiries.
- Consulting management and specialist departments on ICT risks and regulatory issues.
- Promotion of a strong risk and safety culture as well as participation in training and awareness measures.
Our expectations of you
Education
- A completed degree, for example in Business Informatics, Computer Science, Economics, or a comparable qualification.
Qualifications
- Good knowledge of regulatory requirements for ICT risk management and digital operational resilience, especially DORA.
- Understanding of information security, cyber, outsourcing, and ICT third-party risks.
- Strong analytical skills and a structured, solution-oriented approach to work.
- Strong communication skills and the ability to convey complex risk topics clearly to various stakeholders.
- Excellent German and English language skills, both written and spoken.
Experience
- Several years of professional experience in ICT Risk Management, IT Risk Management, Information Security, Operational Risk, or Internal Controls.
- Experience with ICT risk analyses, control assessments, and handling regulatory requirements.
What we offer
- A diverse sales role with a high degree of autonomy and significant scope for shaping.
- The opportunity to actively establish and develop strategic partnerships.
- Collaboration with renowned banks and financial institutions.
- Flexible working hours within a flextime arrangement.
- The opportunity to work up to 15 days per year from various countries abroad.
- 30 days of vacation per year.
- Attractive additional benefits such as company pension schemes, equity participation programs, and mobility offers.
- Individual training and development opportunities.
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
We're Fiserv, a global leader in Fintech and payments enabling innovative financial services experiences that are in step with the way people live and work today. We proudly serve clients in more than 100 countries, so their customers, members and consumers can move money when and where they need it, at the point of thought.
- Established Company
- Onsite, Hybrid
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...