ICT & Security Risk Manager

Allianz Italia; Milano; In loco; EUR 50.000 - 70.000; Tempo pieno

Descrizione del lavoro

A leading insurance and asset management firm in Milan seeks a professional to manage IT and cybersecurity risks. Ideal candidates have at least 5 years of risk management experience in the banking sector, in-depth knowledge of information security standards, and fluency in English. The role emphasizes monitoring cyber risks, updating policies, and training staff on security practices.

Mansioni

• Update policies and methodologies for managing ICT and Security risks.
• Contribute to the Summary Report on ICT and Security Risk situation.
• Monitor exposure to cyber risk through KRIs.
• Integrate ICT and Security risk measurements into the Risk Appetite Framework.
• Assess risks of Third Parties and ICT projects.
• Support first-level functions in identifying controls.
• Stay updated on external regulations and standards.
• Participate in the incident management process.
• Manage internal reporting to corporate bodies.
• Train staff on information security practices.

Conoscenze

5 years of experience in banking sector

Knowledge of information security standards

Core banking systems knowledge

Ability to create presentations

Project management skills

Fluent in English

Knowledge of GRC tools

Data Analytic

Knowledge of ChatGPT

Determination and flexibility

Descrizione del lavoro

The selected individual will join the Risk Management function of Allianz Bank and will be responsible for the process of managing IT and cybersecurity risks.

Functions

As a second-level control function, in coordination with the ISO and other control functions (operational risk management, compliance, audit), the ICT & Security risk management will be responsible for, among other things :

• Updating policies, methodologies, and processes for managing ICT and Security risks;
• Contributing to the definition of the Summary Report on the ICT and Security Risk situation;
• Continuously monitoring exposure to cyber risk, also through the ongoing evolution of the set of KRIs;
• Ensuring the effective integration of the measurement of the ICT and Security risk profile into the Bank’s Risk Appetite Framework;
• Assessing the ICT and Security risk profile of Third Parties, as well as the risks related to ICT projects;
• Supporting first-level functions in identifying controls in the face of any weaknesses found;
• Keeping constantly updated on the evolution of external regulations, international standards, and Group Policies;
• Participating in the incident management process to evaluate the severity of incidents and the effectiveness of the identified remediation plans;
• Managing internal reporting to corporate bodies and functions;
• Training and raising awareness among staff about the importance of information security and the practices to follow.

Skills

• A minimum of 5 years of experience in the banking sector, ideally within the risk management function (non-financial risks) or ICT / Security;
• In-depth knowledge of information security standards (e.g., DORA, ISO / IEC 27001);
• Knowledge of core banking systems;
• Ability to create presentations and draft documents;
• Project management skills;
• Fluent knowledge of the English language;
• Knowledge of GRC tools is a plus
• Data Analytic
• Knowledge of ChatGPT
• Determination, flexibility, and ability to work in a team

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

At Allianz, we stand for unity : we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us. Let’s care for tomorrow.