Senior ICT Risk Manager (f/m/d)

The Global Operational Business Risk Management team is the independent second-line function responsible for overseeing operational and business risks across Allianz Global Investors. The team provides risk analysis, advice, and constructive challenge to the business and control functions across the organisation. We are looking for an experienced risk professional who understands technology sufficiently deeply to provide credible, independent challenge to senior Technology stakeholders and to translate ICT risk into clear business and management implications. The role does not require the successful candidate to be a technical specialist in every ICT discipline. It does, however, require sufficient technical understanding, sound risk judgement and senior-level communication skills to challenge specialists effectively and provide an independent enterprise-risk perspective. The Senior ICT (Information Communication Technology) Risk Manager plays a leading role in the independent oversight of ICT and digital risks across Allianz Global Investors. The role combines a sound understanding of technology with strong risk management judgement and translates complex ICT topics into clear risk assessments, management implications, and practical challenge. **The successful candidate will:** * Act as a senior subject-matter expert for ICT Risk within Operational Business Risk Management. * Maintain an enterprise-wide view of ICT risk and its interaction with operational risk, business resilience, and third-party dependencies. * Work closely with Technology, Information Security, Business Continuity Management, Operational Resilience, Data, business functions, and other Risk and Control functions. What you will do * Lead independent second-line oversight and challenge of ICT risks across infrastructure, applications, information security, technology development and change, operations, resilience, and business continuity. * Lead independent risk and control assessments, challenging first-line risk assessments, governance and control frameworks, as well as control design, implementation, and operating effectiveness. * Monitor and assess the ICT risk profile using key risk indicators, incidents, deficiencies, and risk and control assessments; evaluate risk exposure against established risk appetite and tolerance thresholds, and escalate material concerns where appropriate. * Provide independent risk input and challenge for material technology projects, transformations, and system changes, with a particular focus on resilience, security, critical business services, and client impact. * Provide risk-based challenge of material technology architecture and cloud decisions, particularly where these may affect resilience, security, data protection, or third-party dependencies. * Oversee ICT incidents from a second-line perspective, challenging impact assessments, root cause analyses, remediation activities, and lessons learned to identif