ICT Risk Officer (m/w/d)
Core
ICT Risk Officer responsible for developing and monitoring ICT risk management frameworks, assessing risks in cybersecurity, IT operations, and third-party services, and supporting the implementation of DORA regulations.
Role type
ICT Risk Officer (IC)
Builds
ICT risk management framework, risk registers, and risk reports for management and governance bodies.
Domain
Fintech / Payments / Financial Services
Required skills
ICT risk management, regulatory compliance (DORA), risk analysis, control evaluation, third-party risk management, incident management, KRI/KCI development, reporting, stakeholder communication
Preferred skills
regulated financial services experience, ISO 27001/NIST/COBIT frameworks, regulatory audit experience, MaRisk/ZAG knowledge
Technologies
DORA, ISO 27001, NIST, COBIT, MaRisk, ZAG
Responsibilities
Develop and maintain ICT risk management framework; Identify, assess, and monitor ICT risks; Conduct ICT risk analyses; Maintain ICT risk register; Challenge first line of defense controls; Evaluate effectiveness of security measures; Support ICT incident management; Implement regulatory requirements; Develop and monitor KRIs and KCIs; Create risk reports; Support internal/external audits; Advise management on ICT risks; Promote risk culture and training.
Seniority
Mid-Senior, hands-on IC
