Senior ICT Risk Manager (f/m/d)

Allianz Global Investors GmbH; Frankfurt; Hybrid; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Hybrid model

Pension plan

Relocation support

Employee share plan

Mental health

Mobility solutions

Career opportunities

Learning & development

Job summary

Allianz Global Investors GmbH is seeking a Senior ICT Risk Manager to lead the independent second‑line oversight of ICT and digital risk. You will translate complex technology topics into clear risk assessments, challenging governance and ensuring robust resilience across infrastructure, cloud, and security domains.

With 5+ years in ICT/Technology risk in a regulated setting, you will drive risk assessments, incident analyses, and remediation across international operations, while communicating

Qualifications

• Experience in ICT/Technology Risk, Operational Risk or Information Security within regulated environments.
• Strong knowledge of risk assessments, control design and remediation.
• Familiarity with governance, resilience, incident management and third‑party risk.
• Understanding of DORA implications for ICT risk and operational resilience.
• Ability to translate complex ICT topics into clear risk language.

Responsibilities

• Lead independent second-line oversight of ICT risks across infrastructure, applications, and security.
• Challenge first‑line risk assessments and governance frameworks; review control design and effectiveness.
• Monitor ICT risk using KRIs, incidents, and risk assessments; raise material concerns when needed.
• Provide risk input on major technology projects focusing on resilience, security, and business impact.
• Oversee ICT security testing findings and remediation efforts; ensure lessons are captured.

Skills

ICT risk management

Information security

Risk assessments

Governance

DORA knowledge

Cloud risk

Stakeholder management

Excellent English

German language advantage

Education

University degree in IT/CS/Business/Economics/Finance/Risk Management

Tools

ISAE 3402 / SOC / COBIT / ITIL / ISO/IEC 27001 / NIST CSF

Job description

About Allianz Global Investors

Allianz Global Investors is a leading active asset manager, managing assets for individuals, families, and institutions worldwide. Our shared goal to shape a future of opportunity for our clients is foundational to our culture and our values. We look to attract, and actively nurture, individuals with the drive to achieve excellence at every stage of the investment experience.

We believe an inclusive culture is key to a flourishing workforce. Not only do we celebrate the broad range of experiences, backgrounds, and attributes that our workforce brings, but we support our people to live and work in a way that promotes their own wellbeing.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer.

We are united by a shared commitment: to put our clients first and at the centre of everything we do. Their needs inspire our thinking and guide our actions.

Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future - for our clients and for the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

The Global Operational & Business Risk Management team is the independent second-line function responsible for overseeing operational and business risks across Allianz Global Investors. The team provides risk analysis, advice, and constructive challenge to the business and control functions across the organisation.

The Senior ICT (Information & Communication Technology) Risk Manager plays a leading role in the independent oversight of ICT and digital risks across Allianz Global Investors. The role combines a sound understanding of technology with strong risk management judgement and translates complex ICT topics into clear risk assessments, management implications, and practical challenge.

What you will do

• Lead independent second-line oversight and challenge of ICT risks across infrastructure, applications, information security, technology development and change, operations, resilience, and business continuity.
• Lead independent risk and control assessments, challenging first-line risk assessments, governance and control frameworks, as well as control design, implementation, and operating effectiveness.
• Monitor and assess the ICT risk profile using key risk indicators, incidents, deficiencies, and risk and control assessments; evaluate risk exposure against established risk appetite and tolerance thresholds, and raise material concerns where appropriate.
• Provide independent risk input and challenge for material technology projects, transformations, and system changes, with a particular focus on resilience, security, critical business services, and client impact.
• Provide risk-based challenge of material technology architecture and cloud decisions, particularly where these may affect resilience, security, data protection, or third-party dependencies.
• Oversee ICT incidents from a second-line perspective, challenging impact assessments, root cause analyses, remediation activities, and lessons learned to identify systemic weaknesses and recurring risk themes.
• Review and challenge material findings from ICT security and resilience testing, including vulnerability assessments, penetration testing, and DORA-related testing, and oversee the risk-based remediation of identified weaknesses.
• Maintain awareness of the evolving cyber threat and technology landscape, including risks arising from cloud services, digitalisation, artificial intelligence, and external technology providers, and assess the implications for the ICT risk profile, resilience scenarios, and risk and control assessments.
• Develop and maintain ICT-related risk frameworks, control expectations, methodologies, and taxonomies, and contribute to the effective implementation of DORA and other relevant regulatory and internal requirements.

What you bring

• At least 5 years of relevant professional experience in ICT/Technology Risk, Operational Risk, Information Security, Technology Audit or a comparable risk/control function, ideally within financial services or another regulated environment.
• Practical knowledge of ICT risk management and controls, including risk assessments, control design and effectiveness, scenario analysis and key risk indicators.
• Strong understanding of ICT governance, information security, operational resilience, business continuity, third-party/cloud risk and technology change.
• Sound understanding of DORA and its implications for ICT risk, operational resilience, incident management and third-party risk.
• Experience assessing and challenging ICT risks, controls, incidents, deficiencies and remediation plans, and communicating material risks to senior stakeholders and governance committees.
• Familiarity with relevant control assurance and technology frameworks, such as ISAE 3402, SOC, COBIT, ITIL, ISO/IEC 27001 or the NIST Cybersecurity Framework.
• University degree in IT, Computer Science, Business, Economics, Finance, Risk Management or a related field, or equivalent relevant professional experience.
• Strong analytical, communication and stakeholder management skills, with the ability to translate complex technology topics into clear business and risk language.
• Independent, pragmatic and solution-oriented approach, with the ability to manage multiple priorities in an international environment.
• Excellent English; German or another European language is an advantage.
• Additional advantages: Relevant certifications such as CISA, CRISC, CISSP or CISM, experience in asset management, and exposure to technology transformation, AI-related risks or frameworks such as COBIT, ITIL, ISO/IEC 27001 or NIST CSF.

What we offer

• We empower our employees by ensuring flexible work arrangements that maintain a balance between performance, productivity, career development and personal priorities (e.g., hybrid model/ flexible working hours)
• Securing your future: Access to company pension/savings plans
• Family support (relocation/ childcare facilities)
• Company share purchasing plan
• Mental health and wellbeing programs
• Mobility solutions (Jobrad bike leasing, subvention Jobticket)
• Career opportunities within the entire Allianz Group
• Self-guided learning & development
• ... and so much more!