ICT Risk Manager

About the role

Group Governance is a newly established team, dedicated to enabling the safe and scalable growth of the Raisin Group. You will be responsible for driving process optimization, implementing robust governance structures, and establishing the foundational ICT risk management process for the 1st line of defense.

What you'll do

• Drive and maintain the underlying methodology approaches for all ICT risk processes and operations, ensuring process robustness and consistency.
• Coordinate ICT risk management across the organization, including designing and operating standardized processes for handling ICT risk cases.
• Support the identification, analysis, evaluation, and mitigation of ICT risks, collaborating closely with affected departments.
• Advise risk owners on effective risk treatment strategies and assist management with related decision-making.
• Monitor the implementation status of all defined risk treatment measures and provide necessary oversight.
• Prepare management reports detailing the overall ICT risk profile and the progress of risk mitigation efforts.

What you'll need

• Bachelor's or Master's degree in Engineering, Computer Science, Business Administration, or a related technical field.
• 3-5 years of hands-on experience in information security, ICT risk management, or a closely related field.
• Experience working within the banking or financial services industry is highly desirable.
• Strong knowledge of ICT risk management principles and practices, including risk assessment, mitigation, and monitoring.
• Deep knowledge of banking regulations, standards, and frameworks (e.g., NIST, ISO 2700x, MaRisk/BAIT, DORA, GDPR, and/or PCI DSS).
• Strong technical understanding of ICT risks, including expertise in securing databases both in transit and at rest.
• Strong collaboration and communication skills, necessary for advising and coordinating across diverse departments.

Nice to have

• Professional certifications such as CISSP, CISM, or CRISC.
• Background from a smaller firm or Fintech for better cultural fit.
• Familiarity with AI solutions and an understanding of LLM models.
• Familiarity with tools such as Service Now, G Suite, Web app firewall, Linux, Jira, and Confluence.

What they offer

• Employee Development Budget of €2,000 and four full training days per year.
• Flexible working hours, home office and 30 vacation days.
• Company pension scheme (Betriebliche Altersvorsorge) supported with 20%.
• Urban Sports Club membership subsidized with more than €20 per month.
• Deutschland Ticket subsidized with €25 per month.
• Relocation support available.