Director, ICT Risk & Resilience Strategy

Scope Ratings GmbH; Poznań; On-site; PLN 210,000 - 290,000; Full time

Job summary

Scope Ratings GmbH is seeking an ICT Risk Manager to lead day-to-day execution of the ICT risk management framework, including risk assessments, registers, resilience testing, and reporting. You will collaborate with business and technology functions to strengthen controls and oversight across ICT risk domains.

The role requires 4+ years in risk, security or resilience, familiarity with frameworks such as ISO 27001/NIST and strong English skills.

Qualifications

• Draft policies, methodologies and process documentation.
• Design processes/workflows including vendor assessment and change risk review.
• Respond to client security questionnaires and maintain library of responses.
• Identify opportunities to streamline and automate the function's processes.
• Build relationships with business, technology and control functions for ICT risks.
• Design and run ICT business continuity and resilience exercises.
• Run ICT security testing programmes including penetration testing and vulnerability management.
• Maintain cyber threat landscape and translate intel into risk updates.
• Consolidate findings from audits, risk assessments and incidents into a single ICT findings view.
• Write executive summaries for Resilience Committee and senior management.

Responsibilities

• Draft and maintain the ICT risk management framework, the underlying policies and methodologies.
• Design the function's processes and workflows, including vendor assessment, finding management and change risk review, in collaboration with business and technology functions.
• Respond to client security questionnaires and ad-hoc security and resilience disclosure requests, and maintain a library of standard responses.
• Identify opportunities to streamline and automate the function's processes.
• Build and maintain effective relationships with business, technology and control functions, supporting them in identifying ICT risks, including vendor assessments, BIAs and control documentation.
• Design and run ICT business continuity and resilience exercises, including scenarios, facilitation and capturing lessons learned.
• Run the ICT security testing programme, including penetration testing, vulnerability scanning, social engineering and phishing simulations, and breach scenario exercises.
• Maintain the cyber threat landscape through active monitoring of threat intelligence sources, ISAC participation and sectoral information sharing, and translate threat intel into scenarios and risk profile updates.
• Consolidate findings from audits, risk assessments, security testing and incidents into a single ICT findings view, and track remediation through to closure across business and technology functions, escalating delays and blockers to the Head of ICT Risk Management.
• Write executive summaries and briefings on ICT risk topics for the Resilience Committee, Senior and Executive Management and the Boards.

Skills

ICT risk management

Policy drafting

Security testing programs

Business continuity

Vendor risk management

ISO/IEC 27001

NIST Cybersecurity Framework

DORA familiarity

English fluency

Job description

Scope Ratings GmbH is seeking an ICT Risk Manager to lead day-to-day execution of the ICT risk management framework, including risk assessments, registers, resilience testing, and reporting. You will collaborate with business and technology functions to strengthen controls and oversight across ICT risk domains.

The role requires 4+ years in risk, security or resilience, familiarity with frameworks such as ISO 27001/NIST and strong English skills.