Division
JOB DESCRIPTION
Risk Management – Technology & Cyber Risk
Role Purpose
Risk Management division forms part of Euroclear's second line (of defense) and its mission is to support Euroclear in achieving its goals and delivering its strategy through providing robust, independent oversight of risk-taking activities across the Group.
The IT Risk Domain Manager is a senior expert within the Risk Management division, providing expert input and recommendations on the identification, assessment, and mitigation of IT risks across the organization. This role is responsible for ensuring that IT risk management policies, procedures, and controls are not only implemented but also strategically aligned with internal standards and regulatory requirements. The IT Risk Manager plays a key role in influencing the design and selection of controls to protect information systems and organizational assets.
Key Responsibilities
* Evaluate, test, recommend, develop, coordinate, monitor, and maintain IT risk management policies, procedures, and systems (hardware, firmware, software);
* Review and challenge IT architecture, designs, plans, controls, processes, standards, policies, and procedures to ensure alignment with risk management objectives and IS standards;
* Identify IT risks and exposures, determine causes of incidents or violations, and suggest procedures to halt future incidents;
* Participate in the investigation and resolution of IT risk incidents, recommending enhancements to improve the organization's risk posture;
* Provide risk assessments and recommendations for the design, development, and implementation of IT risk controls and software;
* Advise on the selection of controls designed to prevent intentional or inadvertent access, modification, disclosure, or destruction of information assets;
* Identify and analyse operational risks for IT systems security;
* Provide guidance and direction within IT and among users for the protection of information systems, corporate information, and intellectual property assets.
Required Qualifications
* Master's degree in Computer Science, Information Technology, Risk Management, or a related field (or equivalent experience);
* At least 7+ years of experience in IT risk management, IT audit, or a similar area;
* Strong knowledge of IT risk management standards (e.g., COBIT, ISO 31000, NIST);
* Demonstrated analytical and problem-solving skills;
* Excellent written and verbal communication skills in English;
* Professional certifications (e.g., CRISC, CISM, CISA, or equivalent) are highly desirable.
Soft Skills
* Strategic thinking and the ability to influence and advise senior stakeholders;
* Strong attention to detail and a methodical approach to problem-solving;
* Ability to work collaboratively within a team and communicate effectively with both technical and non-technical stakeholders;
* Eagerness to learn and develop new skills in IT risk management;
* Takes ownership: self-motivated, self-organised and demonstrates good judgement to set priorities and make decisions autonomously, and to coordinate accordingly;
* Ability to manage time and priorities effectively, especially when handling multiple tasks or deadlines.