Senior ICT Risk Manager – Independent Second Line - Vienna, Austria

Western Union; Wien; Hybrid; EUR 72,000 - 88,000; Full time

Benefits offered by this job

Comprehensive life and medical cover

Luncheon vouchers

Employee discount programs

Job summary

Western Union seeks an experienced ICT Risk leader to head the independent 2LoD for an Austrian bank subsidiary. You will oversee risk identification, assessment, remediation, and reporting to the Management Board, auditors, and regulators within established governance.

You will shape a dedicated ICT risk oversight capability, balancing local regulatory needs with global digital risk expertise, and deliver a sustainable control framework with broad visibility.

Qualifications

• At least seven years of ICT risk management experience.
• Experience with DORA, EBA ICT Guidelines, or similar frameworks.
• Experience managing regulatory inspections, audits, or reviews.
• Experience overseeing third-party ICT services.
• Strong knowledge of ICT risk governance frameworks (DORA/ISO/NIST/COBIT).
• Relevant professional certifications desirable (CRISC/CISM/CISSP/CISA).
• Fluent English in written and spoken.

Responsibilities

• Own and enhance the ICT Risk Management Framework, including policies, standards, governance, controls, and reporting.
• Act as the independent 2LoD, providing oversight of ICT risk management activities.
• Define, monitor, and report ICT risk appetite, KRIs, thresholds, and escalation protocols.
• Lead DORA compliance activities; align with regulatory requirements.
• Develop and oversee the Digital Operational Resilience Testing Programme.
• Oversee ICT incident management, regulatory reporting, and remediation.
• Coordinate regulatory engagements and audits; act as primary ICT risk contact.
• Prepare reporting on ICT risk posture and risks to senior management and the board.

Skills

Fluent English

Analytical skills

Stakeholder management

Problem solving

Education

University degree or higher

Job description

In this high impact role, you will provide dedicated ICT Risk leadership with the Western Union International Bank’s independent Second Line of Defence (2LoD). You will oversee and challenge how First Line teams identify, assess, manage and remediate ICT risk. You will have regular access to the Management Board and engage with auditors and supervisor authorities with regards to ICT Risks, through the Bank’s established governance arrangements.

This is an opportunity to shape a dedicated ICT risk oversight capability for an Austrian bank operating within a global leader in cross-border money movement. You will combine local regulatory influence with access to international technology, cyber, payments and risk specialists, helping protect the resilience of services used by customers around the world. The role offers substantial autonomy, Board-level visibility and the chance to build a lasting control framework rather than simply maintain an established program.

Your impact will include strengthening the Bank’s independent ICT risk oversight model, establishing a clear annual oversight and assurance plan, enhancing risk appetite and Management Board reporting, challenging priority ICT and third-party risk exposures, and embedding a sustainable review cycle for the ICT Risk Management Framework. You will be supported by established Risk Management and Internal Control capabilities, specialist external expertise during transition and access to global Western Union stakeholders.

Role Responsibilities

• Own and continuously enhance the ICT Risk Management Framework, including policies, standards, governance, controls, and reporting.
• Act as the independent Second Line of Defence (2LoD), providing oversight and challenge of ICT risk management activities across the Bank.
• Define, monitor, and report on ICT risk appetite, Key Risk Indicators (KRIs), thresholds, and escalation protocols.
• Lead and oversee DORA compliance activities, ensuring alignment with applicable European regulatory requirements and industry best practices.
• Develop and oversee the Digital Operational Resilience Testing Programme, including scenario-based testing, resilience exercises, and vulnerability assessments.
• Provide oversight of ICT incident management, regulatory reporting, post-incident reviews, and remediation activities.
• Ensure effective integration of ICT risk management with Business Continuity Management and Disaster Recovery frameworks.
• Oversee ICT third-party and outsourcing risk governance, including criticality assessments, concentration risk, contractual requirements, and exit planning.
• Coordinate regulatory engagements, audits, and supervisory reviews, serving as the primary contact for ICT risk and operational resilience matters.
• Monitor control effectiveness, oversee assurance activities, and ensure timely remediation of audit findings and regulatory actions.
• Prepare and deliver reporting on ICT risk posture, resilience, and emerging risks to senior management, committees, and the Management Board.
• Act as a trusted advisor to senior stakeholders on ICT risk, operational resilience, and regulatory developments.

Role Requirements

• University degree or relevant professional qualification.
• At least seven years of relevant experience in ICT risk management, technology risk, information security, IT audit or operational resilience, including experience exercising independent oversight or challenge within a regulated financial services environment.
• Proven experience implementing or managing DORA, EBA ICT Guidelines, or comparable ICT risk and regulatory frameworks, with the ability to translate regulatory requirements into proportionate governance, oversight and reporting.
• Experience managing regulatory inspections, supervisory engagements, audits, or regulatory reviews.
• Experience overseeing third-party risk and outsourced ICT services.
• Experience preparing and presenting risk assessments, regulatory updates, and recommendations to senior leadership, committees, or board-level stakeholders.
• Strong knowledge of ICT risk and governance frameworks, including DORA, PSD2, ISO 27001, NIST, and COBIT.
• A relevant professional certification such as CRISC, CISM, CISSP, CISA or an equivalent risk, security or audit qualification is desirable.
• Strong analytical, communication, stakeholder management, and problem-solving skills.
• Fluent English language skills, both written and verbal.

Preferred Qualifications

• Experience within banking, payments, fintech, or other regulated financial services environments.
• Experience operating within multinational and matrix organisations.
• Fluency in German.
• Additional risk management certifications are advantageous.

Work Shift

HYBRID - Western Union values in-person collaboration, problem solving, and ideation whenever possible. We believe this fosters common ways of working and supports how we execute initiatives for our customers. The expectation is to work from the office a minimum of three days a week.

BENEFITS AND OTHER DETAILS

Benefits

You will also have access to short-term incentives, multiple health insurance options, accident and life insurance, and access to best-in-class development platforms, to name a few. Please see the benefits below specific to your country. Additional role-specific benefits may be discussed during the interview process or as part of an offer of employment.

Your Austria-specific benefits include:

• Comprehensive life and medical cover
• Contributory pension plan
• Luncheon vouchers
• Employee discount programs and partner benefits

Salary

The minimum gross annual salary for this position is EUR 80,250. The actual offer will reflect the successful candidate’s experience, qualifications and market positioning and may be significantly above this minimum. The overall package also includes short-term incentive eligibility and Austria-specific benefits.

Other Details

We are passionate about honoring our employees’ identities and fostering a feeling of belonging. Our commitment is to provide an inclusive culture that celebrates the unique backgrounds and perspectives of our global teams while reflecting the communities we serve. We do not discriminate based on race, color, national origin, religion, political affiliation, sex (including pregnancy), sexual orientation, gender identity, age, disability, marital status, or veteran status. The company will provide accommodation to applicants, including those with disabilities, during the recruitment process, following applicable laws.

#LI-MP2 #LI-Hybrid

Estimated Job Posting End Date:

11-01-2026

This application window is a good-faith estimate of the time that this posting will remain open. This posting will be promptly updated if the deadline is extended or the role is filled.