ICT Risk Manager

Position Summary We are seeking an experienced ICT Risk Manager with 4 –5 years of professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk, Governance, Risk management & Compliance (GRC), or related fields. The successful candidate will support the implementation, operation and continuous improvement of the ICT Risk Management Framework, Information Security Management System (ISMS), and GRC processes . The role combines ICT risk management, regulatory compliance, reporting, stakeholder advisory and GRC-related activities. Key Responsibilities ICT Risk Management - Coordinate and execute operational activities within the ICT Risk Management framework. - Identify, assess, document and monitor ICT security risks across the organization. - Perform and support ICT risk assessments, risk analyses and control evaluations. - Review and assess risk implications related to information assets, business services and system landscapes. - Conduct security classification and protection needs assessments. - Facilitate risk and control self-assessments and control effectiveness reviews. - Advise business units and relevant stakeholders on ICT risk management requirements and appropriate risk mitigation measures. - Monitor identified risks and associated risk treatment measures. - Support compliance with DORA , applicable local regulatory requirements, internal risk policies and information security standards. Risk Monitoring, Reporting & Stakeholder Management - Prepare and analyze regular reporting on ICT risks, mitigation measures, Key Risk Indicators (KRIs) and relevant management information. - Support the preparation of executive-level reporting for senior management, risk committees and governance bodies. - Monitor remediation and risk treatment actions and ensure appropriate follow-up. - Identify and escalate relevant risk issues where required. - Contribute to management presentations and decision-making materials. - Work closely with business, Information Security and other relevant stakeholders. Governance, Policies & ISMS - Maintain and further develop ICT Risk Management policies, standards, processes and methodologies. - Support the establishment, maintenance and continuous improvement of the Information Security Management System (ISMS) . - Ensure adherence to the Security Baseline and related ICT risk management procedures. - Support the implementation and monitoring of information security governance requirements aligned with recognized industry standards such as ISO/IEC 27001 . - Contribute to internal and external audits, regulatory reviews and compliance assessments. - Support continuous improvement of ICT risk management processes and controls. Technical & Professional Skills - Strong understanding of ICT risk management processes and methodologies. - Good knowledge of relevant regulatory frameworks and industry standards, including: - DORA - EBA Guidelines - ISO/IEC 27001 - NIST would be advantageous - Banking and financial-services regulatory requirements - Experience in conducting ICT risk assessments, risk analyses and security/control evaluations. - Experience with risk treatment and remediation monitoring. - Experience working with GRC platforms , preferably TopEase . - Strong analytical, reporting and documentation skills. - Ability to understand complex system landscapes, information assets and business process dependencies. - Strong Microsoft Office skills, particularly Excel and PowerPoint . Professional Experience & Education - 4–5 years of relevant professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk, GRC or a related field. - University degree in Information Technology, Information Security, Risk Management, Engineering, Business Administration or a related discipline. - Previous experience within banking, financial services or another regulated environment is an advantage. Personal Competencies - Strong analytical and problem-solving capabilities. - Structured and detail-oriented working style. - Strong communication and stakeholder management skills. - Ability to work independently and take ownership of assigned activities. - Ability to collaborate effectively across international and multidisciplinary teams. - Strong organizational skills and ability to manage several topics simultaneously. - High level of integrity and risk awareness. Language Skills - English: Professional proficiency – mandatory - French: Preferred - German: Nice to have

- Coordinate and execute operational activities within the ICT Risk Management framework. - Identify, assess, document and monitor ICT security risks across the organization. - Perform and support ICT risk assessments, risk analyses and control evaluations. - Review and assess risk implications related to information assets, business services and system landscapes. - Conduct security classification and protection needs assessments. - Facilitate risk and control self-assessments and control effectiveness reviews. - Advise business units and relevant stakeholders on ICT risk management requirements and appropriate risk mitigation measures. - Monitor identified risks and associated risk treatment measures. - Support compliance with DORA , applicable local regulatory requirements, internal risk policies and information security standards. Risk Monitoring, Reporting & Stakeholder Management - Prepare and analyze regular reporting on ICT risks, mitigation measures, Key Risk Indicators (KRIs) and relevant management information. - Support the preparation of executive-level reporting for senior management, risk committees and governance bodies. - Monitor remediation and risk treatment actions and ensure appropriate follow-up. - Identify and escalate relevant risk issues where required. - Contribute to management presentations and decision-making materials. - Work closely with business, Information Security and other relevant stakeholders. Governance, Policies & ISMS - Maintain and further develop ICT Risk Management policies, standards, processes and methodologies. - Support the establishment, maintenance and continuous improvement of the Information Security Management System (ISMS) . - Ensure adherence to the Security Baseline and related ICT risk management procedures. - Support the implementation and monitoring of information security governance requirements aligned with recognized industry standards such as ISO/IEC 27001 . - Contribute to internal and external audits, regulatory reviews and compliance assessments. - Support continuous improvement of ICT risk management processes and controls. Technical & Professional Skills - Strong understanding of ICT risk management processes and methodologies. - Good knowledge of relevant regulatory frameworks and industry standards, including: - DORA - EBA Guidelines - ISO/IEC 27001 - NIST would be advantageous - Banking and financial-services regulatory requirements - Experience in conducting ICT risk assessments, risk analyses and security/control evaluations. - Experience with risk treatment and remediation monitoring. - Experience working with GRC platforms , preferably TopEase . - Strong analytical, reporting and documentation skills. - Ability to understand complex system landscapes, information assets and business process dependencies. - Strong Microsoft Office skills, particularly Excel and PowerPoint . Professional Experience & Education - 4–5 years of relevant professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk, GRC or a related field. - University degree in Information Technology, Information Security, Risk Management, Engineering, Business Administration or a related discipline. - Previous experience within banking, financial services or another regulated environment is an advantage. Personal Competencies - Strong analytical and problem-solving capabilities. - Structured and detail-oriented working style. - Strong communication and stakeholder management skills. - Ability to work independently and take ownership of assigned activities. - Ability to collaborate effectively across international and multidisciplinary teams. - Strong organizational skills and ability to manage several topics simultaneously. - High level of integrity and risk awareness. Language Skills - English: Professional proficiency – mandatory - French: Preferred - German: Nice to have