Ict Risk Manager

Job description

The final candidate will perform the following activities

Governance & steering:

• Perform recurrent meetings with Asset Management Companies to monitor the execution of the ICT Risk management activities Consolidate on a quarterly basis the results of the ICT Risk Management activities at GIH level and report the results to GIH Risk and Control Committee
• Prepare annual consolidated reporting for GIH Board of Directors on the evolution of the ICT Risk management framework and its operating effectiveness
• Support the design, implementation and maintenance of the overall

ICT Risk Management Framework

• Coordinate the Local CRO of newly acquired Group Asset Manager for the implementation of the ICT Risk framework ICT Risk Management: Identifying and updating ICT & Cyber risk events related to business area managed Reviewing ICT & Cyber risk Scenarios based on its peculiarities
• Execute quantitative and qualitative risk methodologies Performing the economic quantification of ICT and Security Major incidents to evaluate DORA relevance Setting of ICT Risk Appetite Framework together with CISO and COO Analyzing of Operative risk tolerances quarterly evidence monitoring collected and defined mitigation actions Overseeing escalation process in case of hard limits breach and formalizing detailed risk evaluation Reviewing reports and evidence shared by IT and Security functions (e.g., Backup and restore reports, Vulnerability assessments) Formalizing executive reporting providing update on ICT Risk Management Framework risk evidence and key enhancements Formalizing and annual Reviewing ICT & Cyber Risk reports (e.g., ICT & Cyber Risk
• Report and IT Booklet)

Qualifications

Educational Qualifications

Bachelor's degree in Computer Science, Information Technology (or equivalent experience)

Professional Experience

Understanding of ICT and cyber security risks and the ability to develop and execute effective testing strategies with a good understanding of regulatory compliance requirements for the Financial Markets and Asset Management Industry At least 5 years of relevant experience within information security or cyber risk management

Technical Skills

Experience with ICT risk management methodologies (e.g. ISO, COBIT, NIST) Experience with relevant regulation (e.g.

GDPR, DORA)

• Knowledge of statistical analysis and financial modeling

Skills

• Strong analytical thinking and problem-solving abilities
• Excellent creative, analytical and computer skills with an entrepreneurial approach to large, complex, projects Superior communication (written and verbal) and presentation skills (Executive level)
• Excellent interpersonal skills with proven ability to build relations with internal and external functions Resilient, highly responsive and proactive, ability to successfully execute multiple projects and meet deadlines (effective prioritization of workload) Well organized with the ability to manage several priorities with a hands-on approach
• Ability to work independently and as part of a team Flexibility to work with colleagues and stakeholders in an international team, operating across different countries and time zones Enjoys a fast-paced, high-intensity and complex environment, troubleshooting time-critical issues and working with people
• Strong attention to detail; willing to take proactive action and desire to roll up sleeves Fluent English, any other languages are a plus Availability for business trips