ICT Risk Manager

Position Summary We are seeking an experienced ICT Risk Manager with 4–5 years of professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk, Governance, Risk management & Compliance (GRC), or related fields. The successful candidate will support the implementation, operation and continuous improvement of the ICT Risk Management Framework, Information Security Management System (ISMS), and GRC processes. The role combines ICT risk management, regulatory compliance, reporting, stakeholder advisory and GRC-related activities.

Key Responsibilities
ICT Risk Management
• Coordinate and execute operational activities within the ICT Risk Management framework.
• Identify, assess, document and monitor ICT security risks across the organization.
• Perform and support ICT risk assessments, risk analyses and control evaluations.
• Review and assess risk implications related to information assets, business services and system landscapes.
• Conduct security classification and protection needs assessments.
• Facilitate risk and control self-assessments and control effectiveness reviews.
• Advise business units and relevant stakeholders on ICT risk management requirements and appropriate risk mitigation measures.
• Monitor identified risks and associated risk treatment measures.
• Support compliance with DORA, applicable local regulatory requirements, internal risk policies and information security standards. Risk Monitoring, Reporting & Stakeholder Management
• Prepare and analyze regular reporting on ICT risks, mitigation measures, Key Risk Indicators (KRIs) and relevant management information.
• Support the preparation of executive-level reporting for senior management, risk committees and governance bodies.
• Monitor remediation and risk treatment actions and ensure appropriate follow-up.
• Identify and escalate relevant risk issues where required.
• Contribute to management presentations and decision-making materials.
• Work closely with business, Information Security and other relevant stakeholders. Governance, Policies & ISMS
• Maintain and further develop ICT Risk Management policies, standards, processes and methodologies.
• Support the establishment, maintenance and continuous improvement of the Information Security Management System (ISMS).
• Ensure adherence to the Security Baseline and related ICT risk management procedures.
• Support the implementation and monitoring of information security governance requirements aligned with recognized industry standards such as ISO/IEC 27001.
• Contribute to internal and external audits, regulatory reviews and compliance assessments.
• Support continuous improvement of ICT risk management processes and controls. Technical & Professional Skills
• Strong understanding of ICT risk management processes and methodologies.
• Good knowledge of relevant regulatory frameworks and industry standards, including:
• DORA
• EBA Guidelines
• ISO/IEC 27001
• NIST would be advantageous
• Banking and financial-services regulatory requirements
• Experience in conducting ICT risk assessments, risk analyses and security/control evaluations.
• Experience with risk treatment and remediation monitoring.
• Experience working with GRC platforms, preferably TopEase.
• Strong analytical, reporting and documentation skills.
• Ability to understand complex system landscapes, information assets and business process dependencies.
• Strong Microsoft Office skills, particularly Excel and PowerPoint. Professional Experience & Education
• 4–5 years of relevant professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk, GRC or a related field.
• University degree in Information Technology, Information Security, Risk Management, Engineering, Business Administration or a related discipline.
• Previous experience within banking, financial services or another regulated environment is an advantage. Personal Competencies
• Strong analytical and problem-solving capabilities.
• Structured and detail-oriented working style.
• Strong communication and stakeholder management skills.
• Ability to work independently and take ownership of assigned activities.
• Ability to collaborate effectively across international and multidisciplinary teams.
• Strong organizational skills and ability to manage several topics simultaneously.
• High level of integrity and risk awareness. Language Skills
• English: Professional proficiency – mandatory
• French: Preferred
• German: Nice to have