IS Service Owner - Global Security Platform (m/f/d)

<p> </p> <p> </p> <p><span><span><span><strong><span><span><span>About the Job</span></span></span></strong> </span></span></span></p> <p> </p> <p><span><span><span><span>Allianz is seeking a proactive and knowledgeable <strong>Global IT Service Owner</strong> (GITSO) to lead the governance and oversight of our <strong>Global Security Platform</strong> (GSP). The GSP is a set of approx. a dozen globally available security services and products, covering a wide range of cyber security controls from Endpoint Detection and Response (EDR) over Governance Risk and Compliance (GRC) to Global User Awareness (GUA). </span></span></span></span></p> <p> </p> <p><span><span><span><span>The GITSO role is critical for deriving and enforcing minimum security control requirements, documenting compliance with information security processes, and collaborating with key stakeholders across the organization to mitigate cyber risks. As the GITSO, you will play an important role in overseeing the roadmap for the security services of the GSP, ensuring it aligns with Allianz's strategic goals and regulatory requirements.</span></span></span></span></p> <p> </p> <p><span><span><span><span>You will collaborate with cross-functional global teams, including topic owners for the respective services at Group Information Security (Group IS) as well as the service managers in the Security Operations unit of Allianz Technology as captive global shared service provider. By contributing to the platform's evolution, you ensure it meets the needs of the business while adhering to Allianz’s security policies and frameworks. If you have a strong technical background in IT service management, product design, practical knowledge in IT operations, application development and risk assessment, and a passion for information security, this is your chance to make a significant impact at a leading global company. Join Allianz and help shape the future of information security.</span></span></span></span></p> <p> </p> <p> </p> <p><span><span><strong><span><span><span>What you do</span></span></span></strong></span></span></p> <p> </p> <ul> <li><span><span><span><span>Derive minimum control requirements for the Global Security Platform in collaboration with topic owners and ensure compliance with Allianz's information security processes.</span></span></span></span></li> <li><span><span><span><span>Identify and assess information security risks, and steer implementation of appropriate mitigation measures in coordination with stakeholders</span></span></span></span></li> <li><span><span><span><span>Oversee the standardization, lifecycle and evolution of the services of the GSP, ensuring the platform meets business needs and evolves in alignment with Allianz's strategic objectives.</span></span></span></span></li> <li><span><span><span><span>Collaborate with Group IS, Allianz Technology Security Operations, Group Architecture, and other functions to ensure comprehensive risk management and compliance.</span></span></span></span></li> <li><span><span><span><span>Provide summaries and detailed insights on information security risks and mitigations, as well as the services’ and overall GSP roadmap, to senior leadership.</span></span></span></span></li> <li><span><span><span><span>Drive continuous improvement initiatives for the Global Security Platform, ensuring it remains at the forefront of security and compliance standards.</span></span></span></span></li> </ul> <p> </p> <p> </p> <p><span><span><strong><span><span><span>What you bring</span></span></span></strong></span></span></p> <p> </p> <ul> <li><span><span><span><span><span>Proven ability to identify, assess, and mitigate information security risks. Information Security certifications such as CISSP, CISM or CRISC is a plus.</span></span></span></span></span></li> <li><span><span><span><span><span>Extensive experience in IT service management, with a focus on deriving, implementing, and documenting control requirements and managing IT service lifecycles.</span></span></span></span></span></li> <li><span><span><span><span><span>Strong understanding of compliance and governance frameworks (e.g. ISO 27001, EU-DORA, EU-NIS, COBIT) in conjunction with internal security frameworks and the ability to translate them into controls on a service level.</span></span></span></span></span></li> <li><span><span><span><span><span>Excellent verbal and written communication skills in English, with the ability to engage and collaborate with stakeholders across various levels within the organization.</span></span></span></span></span></li> <li><span><span><span><span><span>Experience in monitoring and steering service units, ensuring quality outcomes and alignment with strategic objectives.</span></span></span></span></span></li> <li><span><span><span><span><span>Higher education degree in IT, Computer Science, Information Security, or a related field</span></span></span></span></span></li> <li><span><span><span><span><span>G