Third-Party Cyber Risk Lead (Hybrid, Global Growth)

Allianz Services; Barcelona; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid work model

Bonus scheme

Pension

Employee shares program

Career development

Job summary

Allianz Services is seeking a Third-Party Cyber Risk Management Specialist to join the Group CISO team in Barcelona. You will contribute to the TPCRM design and implement processes ensuring resilience in third‑party engagements.

You will assess cyber risks for vendors, coordinate mitigations, and provide senior management with regular risk reports, while ensuring regulatory compliance and continuous improvements.

Qualifications

• Bachelor’s degree in IT, Cybersecurity or risk management; professional certifications are favorable.
• Experience in cyber risk management, especially third‑party risk assessment and multi‑project work.
• Proactive, autonomous, strong stakeholder management and collaboration.

Responsibilities

• Contribute to TPCRM process design and alignment with DORA and Allianz standards.
• Conduct cyber risk assessments for third‑party vendors and follow up mitigations.
• Collaborate with internal/external stakeholders for risk communication.
• Develop monitoring systems and provide regular risk reports to senior management.
• Ensure third‑party engagements comply with regulations and internal policies.
• Identify process improvement opportunities to boost efficiency and effectiveness.
• Provide training on third‑party cyber risk management practices.

Skills

Cyber risk management

Stakeholder management

AI basics

GenAI interest

Education

Bachelor's degree in IT/Cybersecurity

CISM certification

CRISC certification

ISO27001 certification

CISA certification

Job description

Allianz Services is seeking a Third-Party Cyber Risk Management Specialist to join the Group CISO team in Barcelona. You will contribute to the TPCRM design and implement processes ensuring resilience in third‑party engagements.

You will assess cyber risks for vendors, coordinate mitigations, and provide senior management with regular risk reports, while ensuring regulatory compliance and continuous improvements.