ICT Risk Manager

Position Summary

We are seeking an experienced ICT Risk Manager with 4 –5 years of professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk, Governance, Risk management & Compliance (GRC), or related fields.

The successful candidate will support the implementation, operation and continuous improvement of the ICT Risk Management Framework, Information Security Management System (ISMS), and GRC processes .

The role combines ICT risk management, regulatory compliance, reporting, stakeholder advisory and GRC-related activities.

Key Responsibilities

ICT Risk Management

• Coordinate and execute operational activities within the ICT Risk Management framework.
• Identify, assess, document and monitor ICT security risks across the organization.
• Perform and support ICT risk assessments, risk analyses and control evaluations.
• Review and assess risk implications related to information assets, business services and system landscapes.
• Conduct security classification and protection needs assessments.
• Facilitate risk and control self-assessments and control effectiveness reviews.
• Advise business units and relevant stakeholders on ICT risk management requirements and appropriate risk mitigation measures.
• Monitor identified risks and associated risk treatment measures.
• Support compliance with DORA , applicable local regulatory requirements, internal risk policies and information security standards.

Risk Monitoring, Reporting & Stakeholder Management

• Prepare and analyze regular reporting on ICT risks, mitigation measures, Key Risk Indicators (KRIs) and relevant management information.
• Support the preparation of executive-level reporting for senior management, risk committees and governance bodies.
• Monitor remediation and risk treatment actions and ensure appropriate follow-up.
• Identify and escalate relevant risk issues where required.
• Contribute to management presentations and decision-making materials.
• Work closely with business, Information Security and other relevant stakeholders.

Governance, Policies & ISMS

• Maintain and further develop ICT Risk Management policies, standards, processes and methodologies.
• Support the establishment, maintenance and continuous improvement of the Information Security Management System (ISMS) .
• Ensure adherence to the Security Baseline and related ICT risk management procedures.
• Support the implementation and monitoring of information security governance requirements aligned with recognized industry standards such as ISO/IEC 27001 .
• Contribute to internal and external audits, regulatory reviews and compliance assessments.
• Support continuous improvement of ICT risk management processes and controls.

Technical & Professional Skills

• Strong understanding of ICT risk management processes and methodologies.
• Good knowledge of relevant regulatory frameworks and industry standards, including:
• DORA
• EBA Guidelines
• ISO/IEC 27001
• NIST would be advantageous
• Banking and financial-services regulatory requirements
• Experience in conducting ICT risk assessments, risk analyses and security/control evaluations.
• Experience with risk treatment and remediation monitoring.
• Experience working with GRC platforms , preferably TopEase .
• Strong analytical, reporting and documentation skills.
• Ability to understand complex system landscapes, information assets and business process dependencies.
• Strong Microsoft Office skills, particularly Excel and PowerPoint .

Professional Experience & Education

• 4–5 years of relevant professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk, GRC or a related field.
• University degree in Information Technology, Information Security, Risk Management, Engineering, Business Administration or a related discipline.
• Previous experience within banking, financial services or another regulated environment is an advantage.

Personal Competencies

• Strong analytical and problem-solving capabilities.
• Structured and detail-oriented working style.
• Strong communication and stakeholder management skills.
• Ability to work independently and take ownership of assigned activities.
• Ability to collaborate effectively across international and multidisciplinary teams.
• Strong organizational skills and ability to manage several topics simultaneously.
• High level of integrity and risk awareness.

Language Skills

• English: Professional proficiency – mandatory
• French: Preferred
• German: Nice to have