Third-Party Cyber Risk Management Expert, Allianz

Allianz

Location:
Spain, Barcelona

Category:
IT - Software Development

Contract Type:
Employment contract

Salary:

Not provided

Save Job

Apply Position

Job Description:

The Third-Party Cyber Risk Management Expert will play an essential role in the Group CISO team, contributing to the design and implementation of the Third-Party Cyber Risk Management (TPCRM) process and service.

Job Responsibility:

Design and Implementation: Actively contribute to the design and implementation of TPCRM processes in alignment with the Digital Operational Resilience Act (DORA) and Allianz Group standards
Risk Assessment: Support business owner to conduct comprehensive cyber risk assessments for third-party vendors, identifying potential vulnerabilities, assessing residual risks, and following up on mitigation actions
Stakeholder Management: Collaborate with internal and external stakeholders to ensure effective communication and management of third-party cyber risks
Monitoring and Reporting: Develop and maintain monitoring systems to track third-party risk exposure, and provide regular reports to senior management
Compliance and Governance: Ensure third-party engagements comply with relevant regulations, including DORA, and Allianz's internal policies
Continuous Improvement: Identify opportunities for process improvements and implement changes to enhance the efficiency and effectiveness of TPCRM activities
Training and Awareness: Provide training and awareness sessions to internal stakeholders on third-party cyber risk management practices and principles

Requirements:

Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field
Professional certifications in risk management, IT risk management, or information security (e.g., CISM, CRISC, ISO27001, CISA) are favorable
Proven experience in cyber risk management, particularly in third-party risk assessment and management
Proven experience in managing multiple projects at the same time

Nice to have:

Advanced degrees are a plus
Familiarity with DORA requirements and implications for TPCRM

What we offer:

Hybrid work model, including up to 25 days per year working from abroad
Company bonus scheme
Pension
Employee shares program
Multiple employee discounts
Career development and digital learning programs
International career mobility
Flexible working
Health and wellbeing offers, including healthcare and parental leave benefits
Support with balancing family and career
Environment fostering innovation, delivery, and empowerment

Additional Information:

Job Posted:
May 09, 2025

Employment Type:

Fulltime

Work Type:

Hybrid work

View All Jobs In This Company

Job Link Share:

Third-Party Cyber Risk Management Expert