(Senior) ICT Risk Management Specialist v Praha –… - Jobeax
Popis nabídky
(Senior) ICT Risk Management Specialist v Praha – Vinohrady, Česko
COMMERZBANK Aktiengesellschaft, pobočka Praha
Na dálkuPráce odkudkoli
Plný úvazekStandardní týdenní pracovní doba
SmlouvaNa dobu určitou nebo freelance
Czech Republic
(Senior) ICT Risk Management Specialist v Praha – Vinohrady, Česko is listed on Jobeax. Browse 80,000+ vacancies available.
GRM-ICT Risk & Resilience Management (GRM-ICT RRM) is responsible for the group-wide management of cyber and information security risks and ensures an appropriate (cyber) security level at Commerzbank by clearly defining roles and responsibilities within the security organization.
The department ICT Risk Management as part of GRM-ICT RRM operates as the "Second Line of Defense" (2nd LoD) for ICT risks. Our key responsibilities include:
Governance of the ICT risk management process at 2nd Line level, covering identification, assessment, treatment, monitoring and escalation in line with the Bank’s risk appetite.
Development and maintenance of an overarching ICT risk inventory, including classification, aggregation and identification of ICT risk hot spots.
Definition and enhancement of ICT risk methodologies, taxonomies and assessment approaches, including review and challenge of the 1st Line.
Enhancement of standardized models, processes, metrics and indicators for Group-wide ICT GRC risk management.
Execution of 2nd Line controls.
As a (Senior) ICT Risk Management Specialist you will:
Play a key role in overseeing the bank's ICT risks. You will ensure that relevant ICT risks are identified, assessed, and coordinated.
Showcase your expertise and expand your skills by taking responsibility for the following 2nd Line of Defense tasks:
Review and challenge ICT risk assessments and risk treatment plans of the 1st Line, and prepare, recommend and track risk acceptance decisions.
Identify, assess and monitor ICT risks, including concentration risks such as provider, technology, location or key-person dependencies.
Translate ICT risks into the OpRisk framework in coordination with Operational Risk Management and escalate unacceptable risks.
Implement regulatory requirements in a solution-oriented manner and derive audience-specific recommendations to steer and mitigate ICT risks.
Cooperate with relevant internal interfaces, the 1st Line, governance functions, internal audit, compliance and internal/external committees within the area of responsibility.
Act as a knowledge multiplier within the relevant area of expertise and share expertise within the team in a needs- and task-oriented manner.
Prepare and maintain meaningful ICT risk reporting for Senior Management, including clear insights on the ICT risk profile, key risk indicators, trends, material issues and decision-relevant recommendations.
Prepare decision-oriented materials for Senior Management and relevant governance bodies, including clear options, risk implications, escalation needs and recommended actions.
Ensure the quality, consistency and usability of ICT risk data in relevant GRC tools and reporting systems, supporting reliable risk transparency and effective management decisions.
We prefer someone with these skills and experience:
A university or university of applied sciences degree, preferably in business informatics, computer science, mathematics, natural sciences, business administration, law, engineering or a degree program with a focus on information technology, risk management or resilience.
Very good knowledge of regulatory requirements (e.g. DORA) and recognized standards (e.g. ISO 27001, NIST) in the relevant subject area, particularly ICT risk management, governance/compliance, information security, BCM/ITSCM and operational resilience.
Significant experience and specialized knowledge in (digital) operational resilience and ICT risk processes across the 1st, 2nd, or 3rd Line of Defense.
Strong analytical skills, structured working style, audience-specific communication, ability to operate in committees and capability to derive regulatory-compliant and implementable solutions in a complex interface environment.
A proactive mindset, openness to addressing critical issues, and the ability to work collaboratively in developing and implementing constructive solutions within a team setting.
Preferred expertise in leading information security and IT security frameworks, such as CISSP, CISM, ISO 27001, or ICT DORA Risk Manager certification.
Excellent communication and documentation skills in English, with German being an added advantage
You will enjoy:
Home office to make sure you can have the right balance.
Flexible working hours within agile setup.
Generous package of 6 weeks of vacation, 6 sick days and up to 30 days of paid sick leave.
A competitive salary with a very decent annual bonus system.
Special financial conditions and mortgage discount.
Sponsored public transport card, Multisport card, retirement savings contribution, cafeteria system benefits, children summer camps contribution and free coffee.
Opportunity to travel to our Frankfurt headquarters.
A friendly, inclusive and open-minded company culture.
Amazing multicultural colleagues and so much more!
... supply chain risks. This requires developing and managing the dedicated ICT Supply Chain Risk Management function and connect it to the bank’s broader Third-Party-Risk-Management function and as well as the ICT-risk management functions with the goal of appropriately managing the ICT risks arising from the bank’s multiple third-party-relationships. ...
... ownership of a portfolio of AB InBev customers, ensuring invoices are collected on time and customer disputes and deductions are resolved efficiently. As a Senior Credit Management Specialist, you'll work closely with Sales, Finance, Key Account Managers, FP&A, Invoicing and other teams to resolve issues, manage risks ...
We are looking for a Quality Specialist whose main focus will be internal quality management and the continuous improvement of our local Quality Management System in accordance with ISO 9001. The role also includes selected supplier quality activities. We do not expect you to be an experienced specialist in both areas from ...
... participate in training and deepen your skills and knowledge. If interested, please send us your CV in English. 👉 We look forward to meeting you! 👈 Strategic Cost Management Specialist Employer Mobis Automotive Czech s.r.o. Mošnov 375 Apply Apply Save offer Save offer More options Print Share on Facebook Share on X Report this ...
... opportunities If you enjoy turning data into meaningful business insights and want to work in an international environment, we'd love to hear from you. Order Management & AR Collection Specialist with Italian Employer REED SPECIALIST RECRUITMENT Praha Salary 57,000 – 65,000 CZK Apply Apply Save offer Save offer More options ...
... considered an advantage * Strong analytical and problem-solving skills * Excellent communication and presentation abilities * Ability to interpret short-term risks and translate complex data into clear, actionable insights * Experience in Supply Chain Risk Management, Risk Analysis, or Crisis Management is an advantage ...
With our strategy upgrade Momentum, we are further developing the organizational structure and operating model within ICT Risk & Resilience Management with a forward-looking approach. Our aim is to embed regulatory requirements, bank-wide steering, and effective governance in a clear and high-performing target operating ...
With our strategy upgrade Momentum, we are further developing the organizational setup and operating model within ICT Risk & Resilience Management with a forward-looking perspective. Our goal is to anchor regulatory requirements, enterprise-wide steering and effective governance in a clear and high-performing target operating ...
... considered an advantage - Strong analytical and problem-solving skills - Excellent communication and presentation abilities - Ability to interpret short-term risks and translate complex data into clear, actionable insights - Experience in Supply Chain Risk Management, Risk Analysis, or Crisis Management is an advantage ...
... our Loan Data Tape reporting towards regulators. To reinforce this effort and prepare for the future, we are looking to expand our team with an experienced Senior Application Manager . You’ll work in a SAFe environment within a mixed business–ICT team focused on end‑to‑end delivery. The team hosts a weekly team day in ...
A Snapshot of Your Day As a Senior Piping Specialist, you will serve as the technical authority for piping materials, specifications, and components used in complex energy projects. Your day may involve selecting and evaluating piping materials, supporting project teams with technical decisions, reviewing supplier documentation, ...
... analytiky až po klientské týmy. Co tě naopak nečeká? - Netvoříme obsah na sociální sítě, ani vlastní bannery (na to máme grafický tým) - Neděláme community management. - Nečeká tě izolovaná exekuce bez kontextu – u kampaní budeš přemýšlet nad logikou funnelu, metrikami, budgetem i tím, jak výsledek srozumitelně vysvětlit ...
... and reports directly to the Chief Information Security Officer of Elevion Group. This role is suitable for a motivated junior to medior information security specialist who wants to develop further in cybersecurity governance, risk management, compliance and security operations. You should be process-focused, eager to learn ...
... development projects in a manufacturing environment. - Experience managing project teams and cross-functional stakeholders. - Strong knowledge of project management principles, budgeting, scheduling, and risk management. - Excellent leadership, communication, and stakeholder management skills. - PMP or equivalent certification ...
Job offer Accountant / Senior Accounting Specialist Noviko (A Covetrus Company) Join a finance team that's helping shape the future of animal health At Noviko, part of the global Covetrus family, we're passionate about supporting veterinarians, animal health professionals and pet owners through innovative products and services. ...
Our client, a leading global company in the healthcare industry, is looking for an experienced procurement professional to join their Procurement team.
... freshness, cost and efficiency. As we grow across multiple markets, supply chain becomes even more important — and more complex. That’s why we’re looking for a Senior Supply Chain Specialist who can take ownership at group level , work across countries, and drive improvements that go beyond one local portfolio. Why this role ...
... billions of MedTech products per year—to look at the impossible and find transformative solutions that turn dreams into possibilities. About the Role - The Senior Regulatory Affairs Specialist provides dedicated regulatory support for the transition of BDB and DS registrations and licenses from BD to Waters across the ...
Current Opportunity Right now, we´re seeking 2 Group SEO Specialists to join our Customer Engagement team, responsible for the strategy and execution behind organic discovery of FEG's brands and websites — across traditional search engines and the fast-growing landscape of AI-driven search and answer engines (Google AI ...