Senior IT Risk Manager & Ops Risk Manager

Barclay Simpson; Frankfurt; On-site; EUR 120,000 - 180,000; Full time

Job summary

Barclay Simpson is supporting a Financial Services company in Germany seeking a Senior Operational Risk Manager in the 2nd Line of Defence to focus on IT Security and ICT Risk.

You will oversee the Operational Risk framework, provide independent review and challenge, and collaborate with IT Security, Information Security, BCM and Technology teams to translate risks into the Enterprise Risk profile and risk plan.

Qualifications

• Experience in Operational Risk within Financial Services.
• Knowledge of IT Security, ICT Risk and technology controls.
• Fluent German and English.

Responsibilities

• Provide independent 2nd line review and challenge across operational and technology-driven risks.
• Collaborate with IT Security, Information Security, BCM and Technology teams to ensure risks are assessed and translated into the Enterprise Risk profile.
• Ensure risks are incorporated into RCSA, risk appetite, enterprise risk planning, loss events, scenario analysis, remediation activities and senior management reporting.

Skills

Operational risk management

Risk governance

2nd line of defence

IT Security awareness

Stakeholder management

Job description

We are supporting an established Financial Services company looking to hire a Senior Operational Risk Manager into its Risk Management function. This is a senior 2nd Line of Defence position focused on Operational Risk, with a significant emphasis on IT Security, ICT Risk and integrating technology-related risks into the wider Enterprise Risk framework and risk plan.

You will take responsibility for the Operational Risk framework, providing independent 2nd Line Review & Challenge across operational and technology-driven risks. A key part of the role will be working closely with IT Security, Information Security, BCM and Technology teams, ensuring risks such as cyber incidents, system outages, failed IT changes, data availability, third-party technology risks and control weaknesses are appropriately assessed and translated into the organisation’s overall Enterprise Risk profile. You will ensure these risks are incorporated into RCSA, risk appetite, enterprise risk planning, loss events, scenario analysis, remediation activities and senior management reporting.

The successful candidate will have strong Operational Risk experience within Financial Services, combined with a good understanding of IT Security, ICT Risk and technology controls. You should understand how security and technology risks translate into operational and enterprise-level business risks and be comfortable challenging IT and Security stakeholders from a 2nd Line perspective. Knowledge of MaRisk, CRR, KWG, DORA and BAIT, alongside experience with RCSA, scenario analysis and Pillar 1 / Pillar 2 capital requirements, is highly desirable. Fluent German and English are essential.