IT Risk & Governance Associate

at  Allianz Partners

WHAT YOU BRING

• Experience with applying relevant frameworks and regulations (e.g. DORA) to the defined scope.
• Demonstrate interaction with various stakeholders, including IT teams, business units, and senior management, to convey ICT risk-related information effectively.
• Able to work in a global, dynamic and evolving IT environment, adapting to changing requirements and priorities while maintaining a focus on IT governance goals and objectives.
• Certification for relevant frameworks and regulations (e.g. DORA, ISO 27001/27002, COBIT, NIST) is an asset.
• Ability to work independently, make informed decisions, and take ownership of the IT risk management process within the organization.
• Capability to handle complex IT systems and networks, assess various types of risks, and assist in implementing appropriate controls.
• Decision-making and problem-solving skills are crucial, as the role involves making decisions about activities, risks, estimates, and other challenges.
• Fluent in English and good verbal and written communication skills.

Reporting to the IT Risk and Governance Manager, the IT Risk and Governance Associate contributes to the development and implementation the overall framework for the identification, assessment and mitigation of ICT risks throughout the IT delivery model, in collaboration with relevant business and governance stakeholders at Allianz Partners and Allianz Group level.
This function supports the IT Risk and Governance Manager in the activities related to Audit Coordination and Governance within the IT function of Allianz Partners. IT Risk and Governance is part of WI and Lifecycle Management in the global IT Function of Allianz Partners.

As an IT Risk and Governance Associate, you are in charge of the following responsibilities:

• Actively supports with the implementation of the Risk Policy Framework and oversees and monitors compliance with them;
• Contributes to the improvement of Allianz Partner’s risk culture, by actively communicating and running awareness sessions for the scope of ICT Risk;
• Coordinates the implementation and regular performance of all elements of the ICT Risk Management cycles and performs quality assurance on their outcomes.
• Coordinates ICT risk assessments supporting the Risk owners and Control owners in control implementation, documentation and performance, development of mitigation plans and its follow up;
• Supports the overall process of Top & Emerging Risk Assessment (TRA), led by the 2nd line Risk function;
• Coordinates ICT risk related activities with other expert functions, in particular Compliance, Data Privacy, Information Security, Protection & Resilience;
• Ensures compliance with external global regulations related to IT Risk such as the Digital operational Resilience Act (DORA).
• Coordinates pro-actively the annual ICT Compliance Self-Assessment in accordance with Allianz Group Standards, making sure the results are delivered timely and with good quality;
• Coordinates the yearly ratification of the Corporate Rulesbook and related activities (Awareness, communication, compliance check, et.) related to the IT function;

• Supports as audit coordinator internal and external auditors in the execution of their audits in the IT Function;Supports legal in the yearly SoG (System of Governance) review for the scope of the IT function.