Third-Party Cyber Risk Management Expert (m/f/d)

This job is with Allianz Commercial, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

About the Job

Allianz Services within Allianz Technology offers a service aligned with the global Protection & Resilience Service Line to ensure that Allianz Group can respond effectively and efficiently to changes and sudden disruptions, protecting business operations (IT and Non-IT), personnel, and physical assets. Allianz Services plays a key role in implementing the core professional, procedural, and organizational requirements set by the Group Protection & Resilience team to anticipate, prepare for, and adapt to these changes and disruptions.

The Third-Party Cyber Risk Management Expert will play an essential role in the Group CISO team, contributing to the design and implementation of the Third-Party Cyber Risk Management (TPCRM) process and service.

This position will integrate in the Group CISO team, actively supporting the Group's mission to ensure that Allianz's operations remain resilient and secure, particularly in relation to third-party engagements.

What you do

• Actively contribute to the design and implementation of TPCRM processes in alignment with the Digital Operational Resilience Act (DORA) and Allianz Group standards.
• Support business owner to conduct comprehensive cyber risk assessments for third-party vendors, identifying potential vulnerabilities, assessing residual risk and following up on mitigation actions.
• Collaborate with internal and external stakeholders to ensure effective communication and management of third-party cyber risks.
• Develop and maintain monitoring systems to track third-party risk exposure, and provide regular reports to senior management.
• Ensure third-party engagements comply with relevant regulations, including DORA, and Allianz's internal policies.
• Identify opportunities for process improvements and implement changes to enhance the efficiency and effectiveness of TPCRM activities.
• Provide training and awareness sessions to internal stakeholders on third-party cyber risk management practices and principles.

What you bring

• Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field. Advanced degrees are a plus with professional certifications in risk management, IT risk management, or information security (e.g., , CISM, CRISC, ISO27001, CISA) are favorable.
• Proven experience in cyber risk management, particularly in third-party risk assessment and management as well as proven experience in managing multiple projects at the same time.
• Proactive and autonomous in approach to work.
• Strong stakeholder management and interpersonal skills.
• Expertise in conducting cyber risk assessments and familiarity with DORA requirements and implications for TPCRM.
• Ability to work collaboratively within a team and across organizational boundaries.
• Basic knowledge in AI technologies, principles and their practical use.

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at: .

Commitment to Integrity, Fairness & Inclusion

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations.

To Recruitment Agencies

Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.

 98833 | Risk Management | Professional | Non-Executive | Allianz Technology | Full-Time | Permanent