Senior Risk Manager (ICT Risk & Operational Resilience)

Taylor Root; Wien; On-site; EUR 90,000 - 130,000; Full time

Job summary

Taylor Root seeks a Senior Risk Manager to lead ICT and operational risk across its European operations. You will develop and monitor risk management frameworks and ensure alignment with regulatory expectations in a fast-growing digital assets environment.

You will oversee incident management, risk assessments, policy development, and governance, collaborating with technology, security, and compliance teams to strengthen the control environment.

Qualifications

• Extensive experience in ICT Risk, Operational Risk, Technology Risk, or Enterprise Risk Management.
• Strong understanding of DORA, operational resilience, outsourcing risk, and technology governance.
• Experience in regulated environments such as banking, payments, fintech, capital markets, or digital assets.
• Knowledge of risk frameworks including NIST, ISO 27001, COBIT, or similar standards.
• Experience performing risk assessments and managing remediation programmes.
• Strong stakeholder management and communication skills.
• Ability to work in a fast-paced, international environment.

Responsibilities

• Leading the implementation and ongoing enhancement of ICT Risk Management frameworks.
• Supporting the organisation's compliance with the Digital Operational Resilience Act (DORA) and related regulatory requirements.
• Conducting ICT, cyber, operational, and third-party risk assessments.
• Developing and maintaining risk policies, procedures, and governance documentation.
• Overseeing incident management, root cause analysis, and remediation activities.
• Supporting business continuity management, disaster recovery planning, and operational resilience initiatives.
• Monitoring KRIs and preparing risk reporting for senior management.
• Partnering with technology, security, compliance, and business teams to strengthen the overall control environment.
• Assessing outsourced and third-party service providers from a risk perspective.
• Supporting regulatory engagements, audits, and independent reviews.

Skills

ICT Risk

Operational Risk

Regulatory Compliance

Technology Governance

NIST ISO27001

Stakeholder Management

Regulatory Audits

Job description

An innovative and rapidly growing digital assets business is seeking a Senior Risk Manager to join its European team. This is a unique opportunity to play a key role in strengthening the organisation's risk management framework, with a particular focus on ICT Risk, Operational Resilience, DORA compliance, and technology governance.

This role is well-suited to candidates from financial services, fintech, payments, banking, or digital assets environments who have experience navigating complex regulatory requirements and implementing robust operational risk frameworks.

The Role

Reporting into senior leadership, you will be responsible for developing, enhancing, and overseeing the firm's ICT and operational risk management framework across its European operations.

Key responsibilities include:

• Leading the implementation and ongoing enhancement of ICT Risk Management frameworks.
• Supporting the organisation's compliance with the Digital Operational Resilience Act (DORA) and related regulatory requirements.
• Conducting ICT, cyber, operational, and third-party risk assessments.
• Developing and maintaining risk policies, procedures, and governance documentation.
• Overseeing incident management, root cause analysis, and remediation activities.
• Supporting business continuity management, disaster recovery planning, and operational resilience initiatives.
• Monitoring key risk indicators (KRIs) and preparing risk reporting for senior management.
• Partnering with technology, security, compliance, and business teams to strengthen the overall control environment.
• Assessing outsourced and third-party service providers from a risk perspective.
• Supporting regulatory engagements, audits, and independent reviews.

Requirements

• Extensive experience in ICT Risk Management, Operational Risk, Technology Risk, or Enterprise Risk Management.
• Strong understanding of DORA, operational resilience, outsourcing risk, and technology governance.
• Experience within a regulated environment such as banking, payments, fintech, capital markets, or digital assets.
• Knowledge of risk frameworks including NIST, ISO 27001, COBIT, or similar standards.
• Experience performing risk assessments and managing remediation programmes.
• Strong stakeholder management and communication skills.
• Ability to work in a fast-paced, international environment.

Nice to Have

• Experience within cryptocurrency, digital assets, or fintech environments.
• Professional certifications such as CRISC, CISA, CISSP, ITIL, or equivalent.
• Previous involvement in regulatory inspections or supervisory engagements.

What's on Offer

• Opportunity to influence risk strategy within a rapidly expanding international business.
• Exposure to cutting-edge technology and digital asset markets.