ICT Risk Manager

About the role

We are looking for an experienced ICT Risk Manager to support the implementation, operation and continuous improvement of our ICT Risk Management Framework, Information Security Management System (ISMS) and GRC processes. The role involves risk assessment, regulatory compliance and stakeholder advisory across the organization.

Key responsibilities

• Coordinate and execute operational activities within the ICT Risk Management framework, including risk identification, assessment, documentation and monitoring.
• Perform ICT risk assessments, risk analyses, control evaluations and security classification assessments.
• Advise business units on risk mitigation measures and monitor remediation actions.
• Prepare regular reporting on ICT risks, KRIs and management information for senior management and governance bodies.
• Maintain and develop ICT Risk Management policies, support ISMS improvement and ensure compliance with standards such as ISO/IEC 27001 and DORA.

Required profile

• 4–5 years of professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk or GRC.
• University degree in IT, Information Security, Risk Management, Engineering, Business Administration or related field.
• Experience in banking, financial services or other regulated environments is an advantage.
• Strong analytical, problem‑solving and stakeholder management skills.

Required skills

• Strong understanding of ICT risk management processes and methodologies.
• Knowledge of regulatory frameworks and standards: DORA, ISO/IEC 27001, NIST.
• Experience with GRC platforms, preferably TopEase.
• Proficiency in Microsoft Office, especially Excel and PowerPoint.