Enhance and maintain ICT risk management framework
Support management by acting as a subject matter expert in defining, reviewing, and maintaining ICT risk tolerance and risk appetite
Identify, assess, and evaluate ICT risks across the organization
Perform regular and ad‑hoc ICT risk assessments in cooperation with risk owners
Maintain and oversee the ICT risk register, ensuring completeness, quality, and auditability of risk data
Monitor and coordinate risk mitigation plans, including action owners, timelines, and residual risk levels
Develop, maintain, and report on ICT-related Key Risk Indicators (KRIs) and metrics
Support regulatory inquiries, supervisory reviews, and audits related to ICT risk management
Ensure ongoing alignment with regulatory and supervisory requirements
Monitor and assess ICT related incidents
Enhance ICT risk culture through the promotion of risk awareness and systematic training and capability development across the organization

At least 3 years of experience in ICT risk management, preferably within financial institutions or other regulated industry
Competence in risk management, IT service management, information security, cloud computing, and business continuity management
Good understanding of European regulations related to ICT risk and information security management
Strong management skills and ability to drive implementation of risk management processes throughout organization
Excellent stakeholder management and negotiation skills for interaction within all levels of organization
Strong analytical and presentation skills
Fluency in English

Challenging and rewarding work in a highly professional, supportive, and international team
A flat hierarchy and openness to share ideas, opinions, and points of views
Friendly and welcoming culture
Hybrid way of working
Extensive opportunities for professional development
Package of additional seniority vacation days, health insurance, and other benefits

ICT Risk Manager

Key skills