We are seeking an experienced Operational Risk Specialist to join our Risk & Control Management team. This role is crucial for identifying, analyzing, and mitigating operational risks, with a special focus on ICT (Information and Communication Technology) risks. Additionally, the candidate will be responsible for managing operational events, coordinating risk assessments in projects and business areas, and supervising the implementation of internal controls. This role will report to the Head of Operational Risk.
Key Responsibilities:Identify, evaluate, and monitor operational risks, with a particular focus on ICT Risks.Ensure regulatory compliance concerning DORA and digital resilience management.Record, investigate, and analyze operational events. Monitor action plans to prevent future incidents.Coordinate operational and project risk assessments and follow-up on internal controls implementation and issues, especially in topics related to information security, data governance and protection, third-party management and business resilience.Prepare clear and structured reports and presentations for management and support in the coordination of ICT Risks forums.Participate in Group/ZIE ICT Risks forums and workgroups.Contribute to the development and improvement of operational key risk indicators (KRIs).Work closely with Operations Governance, Business Resilience, Third-Party, IT, IT Security (GCS) teams, and other key departments.Minimum Requirements:University degree in Computer Science, IT, Business Administration, or a related field.Minimum of 3+ years of experience in operational risk management, Information Governance, Audit and/or Security or related field.Knowledge of risk management methodologies, internal control frameworks, cybersecurity frameworks, and relevant regulatory requirements (DORA, GDPR, COBIT, ISO 27001, Solvency II) is a plus.Fluent in English, both spoken and written.Strong communication and interpersonal skills, with the ability to work effectively across teams and departments.Proactive with excellent analytical and problem-solving skills.Ability to explain technical concepts and risks to non-technical stakeholders effectively.Professional certifications in IT security, audit, and/or risk management (e.g., CISM, CISA, CRISC, CISSP) not mandatory but will be a plus.If you feel butterflies in your stomach and you think we are a match, send your CV!
#J-18808-Ljbffr