ICT Senior Risk Manager Up to €85,000 plus bonus

Budapest, Hungary

About The Opportunity

Our client is a leading online Forex and CFD Broker providing traders across the globe with cutting edge technology to trade the world’s markets. Their award-winning combination of outstanding customer service coupled with incredibly low-cost pricing across all FX, CFDs and Commodities has resulted in them being one of the world’s fastest growing FX brokers. Their focus is to support every one of our customers’ quests for trading mastery. The vision is to be the most agile, disruptive broker in the market – working smarter for our clients.


The ICT risk control function is a newly create function under the Risk and Assurance team. The successful candidate will be working closely with various departments (e.g. Compliance, Procurement, Security) to ensure the firm’s ICT Infrastructure is secure from internal and external threats, complying with regulatory requirements, and aligning with the firm’s overall risk management strategy.


This position reports to the Head of Enterprise Risk & Assurance, Melbourne, Australia. The role is also functionally aligned with the Head of Compliance in Germany to ensure alignment with DORA requirements. 

Responsibilities

  • Design and Implement an ICT Risk Management Framework covering periodic risk assessments and reporting requirement for significant ICT-related incidents 
  • Mapping ICT Assets, critical systems, applications and data flows to critical processes to mitigate business interruption events such as privacy breaches and denial of service
  • Collaborating and engaging with other stakeholders to test the operational effectiveness of ICT controls
  • Work with other departments to ensure ICT continuity plans are integrated into the organisation's overall business continuity framework.
  • Annually test business continuity and disaster recovery plans, ensuring recovery objectives are met for all critical ICT systems and data.
  • Oversee the timely reporting of ICT incidents (Security breaches and critical interruption), ensuring compliance with relevant reporting requirements.
  • Participate in the Group’s post-incident reviews, and implement corrective actions to prevent recurrence.
  • Design internal policies and procedures (e.g. Crisis Communication Policies and Procedure, ICT-Risk Management Procedures, Third-Party Risk Policy)
  • Assist with the annual preparation of documentation for internal audits (e.g. Risk management Reports) to verify compliance and ensure necessary corrective actions are taken where gaps are identified.

About The Desired Candidate

  • Bachelor's or Master’s degree in Engineering, Computer Science, Business Administration or a related field.
  • Certifications such as CISSP, CISM, CRISC, or similar is a strong plus
  • 3-5 years of experience in information security, ICT risk management, third party risk management or a related field
  • Experience working within the banking or financial services industry is highly desirable.
  • Knowledge of banking regulations, Standards and/or frameworks, such as NIST, ISO2700x, MaRisk/BAIT, DORA, GDPR, and/or PCI DSS.
  • Strong knowledge of ICT risk management principles and practices, including risk assessment, mitigation, and monitoring.
  • Familiarity with European regulatory requirements related to ICT risk, such as DORA and BAIT, and a good understanding of compliance standards
  • Excellent analytical, problem-solving, and decision-making abilities. 
  • Proficiency both written and spoken English;
  • Proficiency in using risk management tools or software - at knowledge of JIRA workflow design and ticket handling is a great plus
  • Strong communication skills for presenting complex information to senior leadership and non-technical stakeholders.
  • Ability to work collaboratively in a team environment and manage cross-functional relationships.

Salary

Up to €85,000 plus bonus

Additional Information

Apply Now