ICT Risk Manager

Position Summary We are seeking an experienced ICT Risk Manager with 4–5 years of professional experience in ICT/IT Risk Management, Information Security, ISMS, Operational Risk, Governance, Risk management & Compliance (GRC), or related fields. The successful candidate will support the implementation, operation and continuous improvement of the ICT Risk Management Framework, Information Security Management System (ISMS), and GRC processes. The role combines ICT risk management, regulatory compliance, reporting, stakeholder advisory and GRC-related activities. Key Responsibilities ICT Risk Management - Coordinate and execute operational activities within the ICT Risk Management framework. - Identify, assess, document and monitor ICT security risks across the organization. - Perform and support ICT risk assessments, risk analyses and control evaluations. - Review and assess risk implications related to information assets, business services and system landscapes. - Conduct security classification and protection needs assessments. - Facilitate risk and control self-assessments and control effectiveness reviews. - Advise business units and relevant stakeholders on ICT risk management requirements and appropriate risk mitigation measures. - Monitor identified risks and associated risk treatment measures. - Support compliance with DORA, applicable local regulatory requirements, internal risk policies and information security standards. Risk Monitoring, Reporting & Stakeholder Management - Prepare and analyze regular reporting on ICT risks, mitigation measures, Key Risk Indicators (KRIs) and relevant management information. - Support the preparation of executive-level reporting for senior management, risk committees and governance bodies. - Monitor remediation and risk treatment actions and ensure appropriate follow-up. - Identify and escalate relevant risk issues where required. - Contribute to management presentations and decision-making materials. - Work close