Job
In dieser Rolle übernimmst du die unabhängige Überwachung von ICT-Risiken, führst Risikobewertungen durch und forderst Herausforderungen in Bereichen wie Informationssicherheit und Betriebsresilienz.
Job-Technologien
Deine Rolle im Team
- The Global Operational & Business Risk Management team is the independent second-line function responsible for overseeing operational and business risks across Allianz Global Investors. The team provides risk analysis, advice, and constructive challenge to the business and control functions across the organisation.
- The Senior ICT (Information & Communication Technology) Risk Manager plays a leading role in the independent oversight of ICT and digital risks across Allianz Global Investors. The role combines a sound understanding of technology with strong risk management judgement and translates complex ICT topics into clear risk assessments, management implications, and practical challenge.
- Lead independent second-line oversight and challenge of ICT risks across infrastructure, applications, information security, technology development and change, operations, resilience, and business continuity.
- Lead independent risk and control assessments, challenging first-line risk assessments, governance and control frameworks, as well as control design, implementation, and operating effectiveness.
- Monitor and assess the ICT risk profile using key risk indicators, incidents, deficiencies, and risk and control assessments; evaluate risk exposure against established risk appetite and tolerance thresholds, and escalate material concerns where appropriate.
- Provide independent risk input and challenge for material technology projects, transformations, and system changes, with a particular focus on resilience, security, critical business services, and client impact.
- Provide risk-based challenge of material technology architecture and cloud decisions, particularly where these may affect resilience, security, data protection, or third-party dependencies.
- Oversee ICT incidents from a second-line perspective, challenging impact assessments, root cause analyses, remediation activities, and lessons learned to identify systemic weaknesses and recurring risk themes.
- Review and challenge material findings from ICT security and resilience testing, including vulnerability assessments, penetration testing, and DORA-related testing, and oversee the risk-based remediation of identified weaknesses.
- Maintain awareness of the evolving cyber threat and technology landscape, including risks arising from cloud services, digitalisation, artificial intelligence, and external technology providers, and assess the implications for the ICT risk profile, resilience scenarios, and risk and control assessments.
- Develop and maintain ICT-related risk frameworks, control expectations, methodologies, and taxonomies, and contribute to the effective implementation of DORA and other relevant regulatory and internal requirements.
Unsere Erwartungen an dich
Ausbildung
- University degree in IT, Computer Science, Business, Economics, Finance, Risk Management or a related field, or equivalent relevant professional experience.
Qualifikationen
- Practical knowledge of ICT risk management and controls, including risk assessments, control design and effectiveness, scenario analysis and key risk indicators.
- Strong understanding of ICT governance, information security, operational resilience, business continuity, third-party/cloud risk and technology change.
- Sound understanding of DORA and its implications for ICT risk, operational resilience, incident management and third-party risk.
- Familiarity with relevant control assurance and technology frameworks, such as ISAE 3402, SOC, COBIT, ITIL, ISO/IEC 27001 or the NIST Cybersecurity Framework.
- Strong analytical, communication and stakeholder management skills, with the ability to translate complex technology topics into clear business and risk language.
- Independent, pragmatic and solution-oriented approach, with the ability to manage multiple priorities in an international environment.
- Excellent English; German or another European language is an advantage.
Erfahrung
- At least 5 years of relevant professional experience in ICT/Technology Risk, Operational Risk, Information Security, Technology Audit or a comparable risk/control function, ideally within financial services or another regulated environment.
- Experience assessing and challenging ICT risks, controls, incidents, deficiencies and remediation plans, and communicating material risks to senior stakeholders and governance committees.
- Additional advantages: Relevant certifications such as CISA, CRISC, CISSP or CISM, experience in asset management, and exposure to technology transformation, AI-related risks or frameworks such as COBIT, ITIL, ISO/IEC 27001 or NIST CSF.
Unser Angebot
- We empower our employees by ensuring flexible work arrangements that maintain a balance between performance, productivity, career development and personal priorities (e.g., hybrid model/ flexible working hours).
- Securing your future: Access to company pension/savings plans.
- Family support (relocation/ childcare facilities).
- Company share purchasing plan.
- Mental health and wellbeing programs.
- Mobility solutions (Jobrad bike leasing, subvention Jobticket).
- Career opportunities within the entire Allianz Group.
- Self-guided learning & development.
Benefits
Mehr Netto
Gesundheit, Fitness & Fun
Work-Life-Integration
Themen, mit denen du dich im Job beschäftigst
Job-Standorte
Das ist dein Arbeitgeber
Allianz ist der perfekte Ort für Menschen, die etwas wagen wollen. Hier erhalten sie die Unterstützung, die sie brauchen, um sich weiterzuentwickeln und aktiv dazu beizutragen, unsere globale Spitzenposition zu stärken. Durch echtes Interesse an den Menschen - sowohl unseren 85 Millionen Privat- als auch Geschäftskunden als auch unseren mehr als 142 000 Mitarbeitern - fördert Allianz eine Kultur, in der unsere Mitarbeiter ermutigt werden, miteinander zu kooperieren, ihr Bestes zu geben und Trends aufzugreifen sowie die Branche herausfordern.
- 250+ Mitarbeitende
- Etablierte Firma
- Onsite, Hybrid, Full Remote
- Banken, Finanz, Versicherung
Arbeitgeber-Reviews
- Karriere
- 3,6
- Arbeitsbedingungen
- 4,0
- Teamkultur
- 3,5
- Engineering
- 3,0
Weitere Jobs
Diese Jobs könnten dich auch interessieren
Mitwirkung bei Sicherheitsanalysen und Bewertung von Anwendungen und IT-Systemen. Unterstützung bei der Konzeption und Umsetzung von technischen Sicherheitsmaßnahmen (z. B. WAF, Load Balancing, Firewall, etc.). Durchführung und Begleitung von...
Die sino AG, mit Sitz in der Düsseldorfer Innenstadt, ist seit über 25 Jahren ein innovativer Finanzdienstleister. Wir haben uns auf die Abwicklung von Wertpapiergeschäften für die aktivsten und anspruchsvollsten Trader in Deutschland spezialisiert. Mit...
Betrieb, Überwachung und Weiterentwicklung der Netzwerk-Infrastruktur. Administration und Konfiguration von Firewalls, Routern und Switches. Sicherstellung der Netzverfügbarkeit, -performance und -sicherheit. Mitwirkung bei IT‐Sicherheitskonzepten und...