Senior IT Risk Manager Competence Center (m/f/d) at Allianz SE

Who are we?

Are you keen on driving innovation? Do you excel in a culture of diversity, collaboration and trust? Then let's care for tomorrow. At Allianz SE, you can count on having a voice, driving innovation and change and making an impact – for us, yourself and the world. For more about Allianz SE, click here.

 

Who will you be joining?

Allianz SE is the global headquarter of the Allianz Group. Our employees reflect the Group's geographic and functional diversity. Within Allianz SE, Group Risk is responsible for monitoring and reporting on the Group's overall risk profile supporting the management to foster Allianz's financial strength and to support value-focused company leadership.

The IT Risk Management team (ITRM) plays a critical role within Group Risk at Allianz SE, the global headquarters of the Allianz Group. As an expert team in information technologies and information security, ITRM is dedicated to ensuring excellence in non-financial risk management for the Allianz Group and its Operating Entities.

The primary focus of the ITRM team is to monitor and manage IT-related risks, thereby contributing to the overall resilience and security of Allianz's IT infrastructure. As the operative IT Risk team for Allianz SE, the team provides support to local Operating Entity teams in their independent risk oversight of all direct and operational activities of Allianz Holding.

In its capacity as a second line function on ICT Risk Management, the ITRM team is responsible for building and maintaining the control framework, overseeing threats and implemented controls, and reporting risks to the respective functions, including top management. By fulfilling these responsibilities, the team contributes to the overall goal of fostering Allianz's financial strength and supporting value-focused company leadership.        

 

How can you make an impact?

 

You will:

• Develop and ensure 2nd Line risk oversight for IT Risk Management within AZSE Holding and AZ Group Operating Entities.
• Provide oversight on processes and follow-up measures to assess the functional effectiveness of Local and Group IT risks, including participation in OE peer-reviews when necessary.
• Act as the Technology risk Center of Competence (CoC) for the Group ITRM team, providing expert inputs to the Governance and strategy team, Data and reporting team, and identifying changes in the IT risk landscape.
• Act as the Technology risk Point of Contact (PoC) for Operating Entities (OEs), overseeing OE ITRM activities, ensuring adherence to Group standards, and challenging assumptions, methodologies, and end products of OEs’ technology risk relevant activities.
• Provide quarterly and ad-hoc Group reporting on the internal control system with a focus on IT processes, ensuring that identified operational losses resulting from IT risk events are reported in Group Risk databases.
• Monitor adherence to Group Risk policies and standards, ensuring transparent and effective identification of IT risks and respective remediation plans where needed, and providing input for the qualitative risk scoping of the Group Operational Risk Catalogue on a yearly basis.
• Collaborate with 1st Line (Local IT and IS functions and AZ Technology, as a shared service provider) in the identification of key and emerging IT risks, including appropriate measures in line with the risk appetite of the Group.
• Provide risk assessment support on large or complex IT projects (Group and Local), including feedback within H2 and to the Group IT Committee (ITCo).
• Create oversight, challenge, and advise AZ Group-wide projects with ITRM perspective, co-leading with the Operational Risk Management team to develop and maintain the Project Risk Assessment framework.
• Represent Group Risk in relevant Committee(s)/meetings (e.g., Group Information Security Working Group) and risk assessment workshops, analyzing risks, offering constructive challenge, and new ideas.
• Identify best practices and assist in the definition and implementation of IT risk development plans, analyzing new risk issues and ensuring efficient communication to and from OEs.
• Interact with Local and Group business functions to ensure proper consideration and awareness of risk aspects, and interact with OEs within the cluster, including regular/ad hoc touchpoints, tracking and supporting OEs in their ICT Risk Framework implementation, and supporting and chasing OEs 2nd Line ICT Risk Management function on oversight activities for identified high risks, incidents, and internal/external audit findings remediation.
• Support the Data and Reporting capability team internally and closely work with the 2nd Line ICT Risk Management Governance team