Information Technology Risk Manager

Our client is seeking an Information Security Risk Manager to join their team. This critical role ensures the protection of the organisations information assets by managing risks, ensuring compliance, and fostering a robust risk culture. It combines independent risk oversight with support for the Head of Corporate Information Security.

Responsibilities:

• Implement and oversee the Risk Policy Framework, including outsourcing and third-party risk management.
• Monitor compliance across central and decentralized IS functions.
• Coordinate Non-Financial Risk Management (NFRM) and Third-Party Risk Management (TPRM) cycles.
• Ensure risk and control ownership, including for outsourced services.
• Conduct and oversee risk assessments, mitigation plans, and control testing.
• Report material risks to the AZ Technology CRO and risk committees.
• Collaborate with functions like Data Privacy, Legal, and Compliance.
• Promote a security awareness culture through training and awareness programs.

Requirements:

• 7+ years in IT/IS risk management or related safeguarding roles.
• Strong understanding of operational, IT/IS, project, third-party, and business risks.
• Experience in Security Governance, resilience, or ITSCM preferred.
• Familiarity with frameworks/regulations (COBIT, COSO, ISO27xxx, GDPR, DORA, NIS).
• Proficiency in tools like ServiceNow or RSA Archer is a plus.
• Strong communication and conflict management skills, with international business experience.

For more information, please contact Ian Donnelly on 01 5222908 or apply below: