Senior ICT Risk Manager (f/m/d)

About Allianz Global Investors

Allianz Global Investors is a leading active asset manager, managing assets for individuals, families, and institutions worldwide. Our shared goal to shape a future of opportunity for our clients is foundational to our culture and our values. We look to attract, and actively nurture, individuals with the drive to achieve excellence at every stage of the investment experience.

We believe an inclusive culture is key to a flourishing workforce. Not only do we celebrate the broad range of experiences, backgrounds, and attributes that our workforce brings, but we support our people to live and work in a way that promotes their own wellbeing.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer.

We are united by a shared commitment: to put our clients first and at the centre of everything we do. Their needs inspire our thinking and guide our actions.

Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future - for our clients and for the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

If you feel inspired to promote the active asset management experience, this is the place for you. Join our international, technology-enabled, and agile environment. Simply upload your CV in English to apply for this position. If you need support to navigate our websites or at any stage during your application, please send an email with your request to [email protected].

To Recruitment Agencies:

Allianz Global Investors has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Global Investors does not accept unsolicited resumes from agency or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place.

Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz Global Investors.

Finally, please do not contact hiring managers directly.

Join us. Let's care for tomorrow.

How to Apply: Applying is quick and easy. Simply upload your CV, complete your personal details, confirm your consent for AI support in the "Additional Information" section, and submit your application.

To support our recruiters, we use Fit Score—an AI‑powered tool that highlights how closely your profile aligns with the role. This helps us review applications more efficiently and focus on what matters most: your skills and experience.

Good to know: The Fit Score is a support tool only. At Allianz, technology never replaces human judgment. Every application is carefully reviewed by our recruiting teams, ensuring a fair, thoughtful, and personal hiring process.

The Global Operational & Business Risk Management team is the independent second-line function responsible for overseeing operational and business risks across Allianz Global Investors. The team provides risk analysis, advice, and constructive challenge to the business and control functions across the organisation.

The Senior ICT (Information & Communication Technology) Risk Manager plays a leading role in the independent oversight of ICT and digital risks across Allianz Global Investors. The role combines a sound understanding of technology with strong risk management judgement and translates complex ICT topics into clear risk assessments, management implications, and practical challenge.

What you will do

• Lead independent second-line oversight and challenge of ICT risks across infrastructure, applications, information security, technology development and change, operations, resilience, and business continuity.
• Lead independent risk and control assessments, challenging first-line risk assessments, governance and control frameworks, as well as control design, implementation, and operating effectiveness.
• Monitor and assess the ICT risk profile using key risk indicators, incidents, deficiencies, and risk and control assessments; evaluate risk exposure against established risk appetite and tolerance thresholds, and escalate material concerns where appropriate.
• Provide independent risk input and challenge for material technology projects, transformations, and system changes, with a particular focus on resilience, security, critical business services, and client impact.
• Provide risk-based challenge of material technology architecture and cloud decisions, particularly where these may affect resilience, security, data protection, or third-party dependencies.
• Oversee ICT incidents from a second-line perspective, challenging impact assessments, root cause analyses, remediation activities, and lessons learned to identify systemic weaknesses and recurring risk themes.
• Review and challenge material findings from ICT security and resilience testing, including vulnerability assessments, penetration testing, and DORA-related testing, and oversee the risk-based remediation of identified weaknesses.
• Maintain awareness of the evolving cyber threat and technology landscape, including risks arising from cloud services, digitalisation, artificial intelligence, and external technology providers, and assess the implications for the ICT risk profile, resilience scenarios, and risk and control assessments.
• Develop and maintain ICT-related risk frameworks, control expectations, methodologies, and taxonomies, and contribute to the effective implementation of DORA and other relevant regulatory and internal requirements.

What you bring

• At least 5 years of relevant professional experience in ICT/Technology Risk, Operational Risk, Information Security, Technology Audit or a comparable risk/control function, ideally within financial services or another regulated environment.
• Practical knowledge of ICT risk management and controls, including risk assessments, control design and effectiveness, scenario analysis and key risk indicators.
• Strong understanding of ICT governance, information security, operational resilience, business continuity, third-party/cloud risk and technology change.
• Sound understanding of DORA and its implications for ICT risk, operational resilience, incident management and third-party risk.
• Experience assessing and challenging ICT risks, controls, incidents, deficiencies and remediation plans, and communicating material risks to senior stakeholders and governance committees.
• Familiarity with relevant control assurance and technology frameworks, such as ISAE 3402, SOC, COBIT, ITIL, ISO/IEC 27001 or the NIST Cybersecurity Framework.
• University degree in IT, Computer Science, Business, Economics, Finance, Risk Management or a related field, or equivalent relevant professional experience.
• Strong analytical, communication and stakeholder management skills, with the ability to translate complex technology topics into clear business and risk language.
• Independent, pragmatic and solution-oriented approach, with the ability to manage multiple priorities in an international environment.
• Excellent English; German or another European language is an advantage.
• Additional advantages: Relevant certifications such as CISA, CRISC, CISSP or CISM, experience in asset management, and exposure to technology transformation, AI-related risks or frameworks such as COBIT, ITIL, ISO/IEC 27001 or NIST CSF.

What we offer

• We empower our employees by ensuring flexible work arrangements that maintain a balance between performance, productivity, career development and personal priorities (e.g., hybrid model/ flexible working hours)
• Securing your future: Access to company pension/savings plans
• Family support (relocation/ childcare facilities)
• Company share purchasing plan
• Mental health and wellbeing programs
• Mobility solutions (Jobrad bike leasing, subvention Jobticket)
• Career opportunities within the entire Allianz Group
• Self-guided learning & development
• … and so much more!