ICT Risk & Resilience Lead, 2LoD (Hybrid)

Western Union; Wien; Hybrid; EUR 72,000 - 88,000; Full time

Benefits offered by this job

Comprehensive life and medical cover

Luncheon vouchers

Employee discount programs

Job summary

Western Union seeks an experienced ICT Risk leader to head the independent 2LoD for an Austrian bank subsidiary. You will oversee risk identification, assessment, remediation, and reporting to the Management Board, auditors, and regulators within established governance.

You will shape a dedicated ICT risk oversight capability, balancing local regulatory needs with global digital risk expertise, and deliver a sustainable control framework with broad visibility.

Qualifications

• At least seven years of ICT risk management experience.
• Experience with DORA, EBA ICT Guidelines, or similar frameworks.
• Experience managing regulatory inspections, audits, or reviews.
• Experience overseeing third-party ICT services.
• Strong knowledge of ICT risk governance frameworks (DORA/ISO/NIST/COBIT).
• Relevant professional certifications desirable (CRISC/CISM/CISSP/CISA).
• Fluent English in written and spoken.

Responsibilities

• Own and enhance the ICT Risk Management Framework, including policies, standards, governance, controls, and reporting.
• Act as the independent 2LoD, providing oversight of ICT risk management activities.
• Define, monitor, and report ICT risk appetite, KRIs, thresholds, and escalation protocols.
• Lead DORA compliance activities; align with regulatory requirements.
• Develop and oversee the Digital Operational Resilience Testing Programme.
• Oversee ICT incident management, regulatory reporting, and remediation.
• Coordinate regulatory engagements and audits; act as primary ICT risk contact.
• Prepare reporting on ICT risk posture and risks to senior management and the board.

Skills

Fluent English

Analytical skills

Stakeholder management

Problem solving

Education

University degree or higher

Job description

Western Union seeks an experienced ICT Risk leader to head the independent 2LoD for an Austrian bank subsidiary. You will oversee risk identification, assessment, remediation, and reporting to the Management Board, auditors, and regulators within established governance.

You will shape a dedicated ICT risk oversight capability, balancing local regulatory needs with global digital risk expertise, and deliver a sustainable control framework with broad visibility.