Operational Risk & ICT Controls Specialist

Zurich 56 Company Ltd; Stockholms kommun; On-site; SEK 700,000 - 1,100,000; Full time

Job summary

Zurich Nordic in Stockholm seeks a Risk & Internal Control Specialist to strengthen the second line of defence across operational and ICT risk and internal controls. You will work with local and international teams and report to the Nordic CRO.

The role focuses on identifying, assessing and mitigating ICT risks, maintaining the ICIF framework, and ensuring regulatory compliance under DORA, with collaboration across Zurich's risk network.

Qualifications

• Bachelor’s degree in Business Administration, Finance, IT, or equivalent field.
• Experience in operational risk management, internal control, information security and IT risk management, preferably within the insurance industry.
• Proficiency in risk management and internal control tools, methodologies and practices.
• Proven knowledge of DORA regulation and its requirements.

Responsibilities

• Local point of contact on ICT and internal control-related matters within Zurich Nordic, coordinating with other units and Group.
• Maintain and ensure effectiveness of operational risk management and internal control frameworks (ICIF).
• Implement, maintain and review 2nd line of defense ICT risk management framework and reporting in line with DORA requirements.
• Facilitate SAOR risk assessments and ensure appropriate risk mitigations.
• Coordinate the operational incident management process and follow up responses.

Skills

Risk management

Internal controls

Analytical skills

Communication

Cross-functional collaboration

Swedish language

Education

Bachelor's degree in Business Administration, Finance, IT, or equivalent

Job description

Zurich Nordic in Stockholm seeks a Risk & Internal Control Specialist to strengthen the second line of defence across operational and ICT risk and internal controls. You will work with local and international teams and report to the Nordic CRO.

The role focuses on identifying, assessing and mitigating ICT risks, maintaining the ICIF framework, and ensuring regulatory compliance under DORA, with collaboration across Zurich's risk network.