Wefox is a world-leading insurtech company driven by a single purpose: to enable people to be safe by making insurance 10 times better through technology. Together with more than 1300 employees in 8 locations across Europe, we are on a mission to give the world easy access to digital insurance solutions. We provide our customers with 360-degree advice through our network of advisors and optimise each individual's risk coverage by offering innovative prevention, assistance, and insurance products.
We are looking for a Technology Risk Manager to join our Platform Technology team in Spain, reporting to the Chief Platform Officer with a matrix reporting line to the Chief Risk Officer. Your daily work will primarily focus on establishing a best in class approach for managing technology risks and driving the implementation of an automated Internal Controls System around wefox's platform. You will work side by side with and provide guidance to a multidisciplinary and multicultural team distributed among our different offices around Europe.
In this role you will: Implement and continuously improve an automated Internal Control Systems framework based on international standards (e.g. ISO 27001 or CIS Critical Security Controls) and best practices, to mitigate risk exposures and in preparation for future certification.
Monitor the Internal Control System, including testing using assurance data analytics tools, and related risk and audit actions.
Engage with technology and platform product stakeholders to proactively identify risks at a granular and technical level and ensure that the platform organisation is effectively driving remediation activities and continuously improving technology risk posture.
Participate or lead Technology Risk initiatives and emerging risk reviews.
Support the Chief Risk Officer and Chief Information Security Officer in all IT related risk matters.
What you bring: Demonstrated experience in identifying, assessing and advising on technology risks and associated Internal Control Systems with a minimum of 4-6 years hands-on experience.
Excellent organisational, problem solving and interpersonal skills to effectively drive the Technology Risk agenda.
Experience in driving Technology risk management in an automated manner is a plus.
Sound knowledge of maintaining, enhancing or auditing an ICS covering technology risks.
Profound know-how of Technology ICS frameworks (e.g. ITIL, COBIT, ISO 27001, CIS CSC).
Fluency in English is mandatory, German or Spanish is a plus.
Professional certifications a plus - CISA/CISM/CISSP/CRISC/CBCP.
What we offer: Flexible working hours including hybrid working, a stack of the latest technologies and working gadgets, training and coaching opportunities, and free coffee, fruit and snacks, because we need fuel! If you love a less-formal work environment, flexible paid time off, a great compensation package and benefits offering - and most of all, being the authentic you, get in touch, we want to meet you!
Your contact person for this role is Shivani Bhardwaj. We are an equal opportunity employer and value diversity. We do not discriminate on the basis of race, religion, colour, national origin, gender, sexual orientation, age, marital status or disability status.
#J-18808-Ljbffr
