ICT Risk & Resilience Lead

Scope Ratings GmbH; Madrid; On-site; EUR 65,000 - 90,000; Full time

Benefits offered by this job

Discretionary bonus

Job summary

Scope Ratings is seeking an ICT Risk Manager to lead the day-to-day ICT risk management, including risk assessments, framework maintenance, resilience testing, and reporting. The role oversees information security, business continuity, and third-party risk, working with business and technology teams in a regulated financial services context.

The ideal candidate has 4+ years in risk/security/resilience, strong policy drafting experience, and knowledge of frameworks such as ISO/IEC 27001 and NIST,

Qualifications

• 4+ years in risk, security, or resilience within regulated industries.
• Experience drafting policies, methodologies and process documentation.
• Experience running ICT risk assessment cycles and security testing programs.

Responsibilities

• Draft and maintain the ICT risk management framework and policies.
• Collaborate with business and technology to design processes and vendor assessments.
• Respond to client security questionnaires and maintain standard responses.
• Run ICT security testing programs including pen tests and vulnerability management.
• Maintain threat intelligence and translate it into risk profiles and scenarios.
• Write executive summaries and briefings for boards and senior management.

Skills

ICT risk management

Risk assessment

Vendor risk management

Policy drafting

Education

CISM or CRISC certification

Job description

Scope Ratings is seeking an ICT Risk Manager to lead the day-to-day ICT risk management, including risk assessments, framework maintenance, resilience testing, and reporting. The role oversees information security, business continuity, and third-party risk, working with business and technology teams in a regulated financial services context.

The ideal candidate has 4+ years in risk/security/resilience, strong policy drafting experience, and knowledge of frameworks such as ISO/IEC 27001 and NIST,