Risk & Internal Control Specialist

Zurich Insurance; Stockholms kommun; On-site; SEK 700,000 - 900,000; Full time

Job summary

Zurich Nordic is seeking a Risk & Internal Control Specialist to join the Risk Management function in Stockholm. You will support identification, assessment, and management of operational and ICT risks and maintain strong internal controls across Zurich Nordic.

You will work from the Stockholm office, reporting to the Nordic Chief Risk Officer, and collaborate with international colleagues to strengthen risk culture and reporting.

Qualifications

• Bachelor’s degree in Business Administration, Finance, Information Technology, or equivalent field.

Responsibilities

• Local point of contact on ICT and internal‑control matters within Zurich Nordic and coordinate with other units.
• Maintain and ensure effectiveness of operational risk management and internal control integrated frameworks (ICIF).
• Implement, maintain and review 2nd line ICT risk management framework, strategies, and reporting in line with DORA requirements.
• Facilitate SAOR, conduct risk assessments, and ensure appropriate risk mitigation measures are in place.
• Coordinate operational incident management and follow up responses.
• Conduct independent risk assessments of ICT risks, third parties, systems and processes to identify vulnerabilities and threats.
• Oversee, monitor and challenge internal controls and actions plans in the Group Risk Management system.
• Collaborate with departments to enhance risk awareness and promote a culture of operational and ICT risk management.
• Provide expert advice and support to senior management on operational risk including ICT risk and internal controls.
• Participate in reporting on the effectiveness of operational and ICT risk management and internal controls.

Skills

Analytical skills

Problem solving

Swedish & English

Cross-functional collaboration

Certifications advantage

Education

Bachelor’s degree in Business Administration/Finance/IT

Job description

We are seeking a highly skilled and experienced Risk & Internal Control Specialist to join our Risk Management function. The role entails working with both operational and information and communication technology (ICT) risk management, in addition to internal control management.

About Zurich

Zurich is one of the world’s leading insurance groups, and one of the few to operate on a global basis. Our mission is to help our customers understand and protect themselves from risk. With about 65,000 employees serving customers in more than 215 countries, we aspire to become the best global insurer as measured by our shareholders, customers and employees. We help individuals, small and medium sized companies and global corporations around the world understand and protect themselves from risk by offering a wide range of insurance products, solutions and advisory services.

Zurich Nordic offers non-life insurance for local and international business in the Nordic market. Zurich Nordic operates as a business unit of Zurich Insurance Europe AG (ZIE), based in Germany, and is ultimately a part of the Zurich Insurance Group, headquartered in Switzerland.

Role Overview

In this role, you will play a crucial part from a second line of defence perspective in ensuring effective identification, assessment, and management of operational risks including ICT risks, as well as maintaining robust internal controls across our operations in Zurich Nordic. Additionally, you will be a part of the Zurich Insurance Europe’s and the Group's risk network, providing you with international colleagues and points of contact.

You will be based in our Stockholm office and report to the Chief Risk Officer for the Nordics.

Key Responsibilities

• Local point of contact on ICT and internal control-related matters within Zurich Nordic, and coordinate with other Business Units, ZIE Head Office, and Group.
• Participate in maintaining and ensuring effectiveness of operational risk management and internal control integrated frameworks (ICIF).
• Implement, maintain and review 2nd line of defense ICT risk management framework, strategies and reporting in line with the Digital Operational Resilience Act (DORA) requirements.
• Facilitate self-assessments of operational risks (SAOR), conduct risk assessments, and ensure appropriate risk mitigation measures are in place.
• Coordinate the operational incident management process and follow up of responses.
• Conduct independent risk assessments of ICT risks, third-parties, systems and processes to identify potential vulnerabilities and threats.
• Oversee, monitor and challenge internal controls and actions plans in the Group Risk Management system.
• Collaborate with various departments to enhance risk awareness and promote a culture of operational and ICT risk management, and internal control.
• Provide expert advice and support to senior management and employees on operational risk including ICT risk and internal control-related matters.
• Participate in reporting on the effectiveness of operational and ICT risk management, as well as internal control, activities.

Qualifications

• Minimum of bachelor’s degree in Business Administration, Finance, Information Technology, or equivalent field.
• Proven experience in operational risk management, internal control, information security and IT risk management, preferably within the insurance industry.
• Proficiency in risk management and internal control tools, methodologies and practices.
• Proven knowledge of DORA regulation and its requirements.

Skills And Competencies

• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills (both in Swedish and English are required), as well as interpersonal abilities to work collaboratively with cross-functional teams and international colleagues.
• Relevant professional certifications are an advantage.

Why Join Us

Be part of a leading global insurance group known for its commitment to sustainability and innovation. Work in a dynamic and diverse environment with opportunities for professional growth and development. Contribute to the success of a company that values integrity, customer focus, and excellence.