IT Risk Officer - Bucharest

Doar pentru membrii înregistrați Bucharest, România

2 zile în urmă

What is the context? · Company has outsourced its IT to Company : infrastructure and business applications development. Allianz Trade is a regulated insurance company. Solvency II regulation requires the implementation of a strong framework for the risk management of IT Applicati ...

Descrierea jobului

What is the context?

Company has outsourced its IT to Company : infrastructure and business applications development. Allianz Trade is a regulated insurance company. Solvency II regulation requires the implementation of a strong framework for the risk management of IT Applications and Services. Company needs a contractor/employee to manage IT risks through the:

Implementation of the Company IT Control framework
Deployment of internal control processes to monitor efficiently the different applications within Allianz Trade IT Landscape and to challenge our different providers

regarding the controls performed on their side

Main tasks

Within the IT Department, and under the responsibility of the Head of governance, the contractor/employee will have to manage the following activities:

Participate in the deployment of the IIRM process (COBIT 5)

Deploy B.A Scoping in Archer to derive criticality of AZ Trade assets

Identify the CIA value and the controls to be applied (TMC)

Open the B.A to the FitGap tool and link it with ARA corresponding control

Identify the controls to be performed (based on ARA coverage)

Manually verify each evidences provided in ARA and indicate whether it is ToD/ ToE

Manually verify each evidences provided in ARA and indicate the result of testing

Evidence collection and control deployment for deficient controls

Open Archer risk, and request BO Validation.

Report on advancement to governance team

Based on the decision made, track the implementation of the mitigation measures or track the risk acceptance expiration date.

Participate in the production of solvency 2 reportings

Provide support to operational teams and owners of object at risks

Support and coordinate New Tool Requests (NTRs) process, ensuring accurate ticket creation, workflow progression, issue escalation, and stakeholder reporting.

Manage Sold Product (PI) and ADOIT object contracts, including creation, updates, and reconciliation with business applications.

Collect and follow up on ISAE/SOC reports, ensuring timely submission, alignment with governance requirements, and audit recommendation follow-up.

Maintain and update the contract referential and IT Contract Management SharePoint, reporting key lifecycle points, risks, and alerts.

Lead the renewal of minor IT contracts with providers and AZTech.

Monitor software license entitlements to ensure compliance, anticipate risks of shortfall, and support procurement planning.

Skill required

Used to work on IT/IS Risk issues

Technical skills: Advanced in audit and internal control methodologies and familiar with COBIT / ITIL / NIST

Capacity to communicate easily with different level of managers

Capacity to prioritize and to manage complexity and good knowledge of IT organization and processes

Analytical skills and rigor

Fluent in English, French is a nice to have