Head of ICT Risk & Vendor Governance

HANetf, Ltd.; Dublin; Vor Ort; EUR 110.000 - 150.000; Vollzeit

Zusammenfassung

HANetf, Ltd. is seeking a senior IT risk and outsourcing governance professional to own the external IT and security landscape.

You will manage MSP relationships, oversee ICT risk frameworks and ensure regulatory compliance under DORA, with close collaboration across Risk, Compliance and senior management. You will coordinate with Engineering on governance of live systems, maintain inventories and incident processes, and provide clear reporting to boards and counterparty bodies.

Qualifikationen

• Experience in IT operations, governance or vendor management within regulated financial services.
• Working knowledge of DORA and Central Bank of Ireland IT outsourcing expectations or equivalent EU frameworks.
• Hands-on experience running ICT risk frameworks, registers and inventories, and business continuity testing.
• Track record negotiating contracts, managing suppliers and controlling costs.
• Ability to own security and risk accountability without deep technical specialization; escalate risks clearly.
• Experience preparing clear reporting for boards, senior management, auditors and counterparties.
• Ability to work across Engineering, Compliance, Risk, external providers and senior stakeholders.
• Organised, practical approach to documenting decisions and following through on actions.
• Right to work in Ireland and exposure to asset management or funds.
• Professional certification such as CISA, CRISC or CISM and exposure to Cyber Essentials Plus or ISO 27001 programmes.

Aufgaben

• Own outsourced IT and MSP relationships, including contracts, SLAs, escalations and performance reviews.
• Negotiate supplier contracts, challenge costs and manage the budget across outsourced IT and vendor estate.
• Maintain a central register of third-party ICT vendors with ownership, renewal dates and risk classifications.
• Ensure ICT contracts meet DORA requirements with exit strategies for critical functions.
• Run ICT risk management framework and risk register day to day.
• Maintain ICT asset and software inventories and the DORA information register.
• Coordinate ICT incident management including regulatory reporting when required.
• Own business continuity and ICT disaster recovery with recovery objectives and testing.
• Oversee resilience testing and security certification programmes (e.g., penetration testing, ISO 27001).
• Keep IT policies current and support due diligence questionnaires.

Kenntnisse

IT governance

Vendor management

DORA knowledge

ICT risk frameworks

Contract negotiation

Security accountability

Board reporting

Cross-functional collaboration

Documentation discipline

Asset management / funds

Jobbeschreibung

HANetf, Ltd. is seeking a senior IT risk and outsourcing governance professional to own the external IT and security landscape.

You will manage MSP relationships, oversee ICT risk frameworks and ensure regulatory compliance under DORA, with close collaboration across Risk, Compliance and senior management. You will coordinate with Engineering on governance of live systems, maintain inventories and incident processes, and provide clear reporting to boards and counterparty bodies.