IT Security Governance - GRC

Job description

**Role & responsibilities** Third party Risk assessment: - Conduct comprehensive risk assessments of third-party vendors, focusing on their security posture and compliance with Allianz's standards. Collaborate with cross-functional teams to understand business processes and security requirements. AI risk assessment: - Evaluate AI technologies and systems for potential security vulnerabilities and risks, ensuring they align with Allianz's security policies. Governance and Compliance: - Ensure alignment with Allianz Group policies, standards, and regulatory requirements. - Develop and maintain governance frameworks to support information security, IT and Application Security objectives. Improvement Implementation: - Based on analysis of data, corelating with risks, create and lead initiatives to implement security improvements, ensuring alignment with strategic goals. - Coordinate with stakeholders to prioritize and execute security projects and initiatives. Stakeholder Engagement: - Act as a liaison between the information security team and other departments to promote security awareness and best practices. Provide expert guidance and support to business units on security governance matters. Continuous Improvement: - Stay abreast of industry trends, emerging threats, and best practices in information security governance. - Recommend and implement continuous improvement strategies to enhance the security posture of Allianz Technology. **Preferred candidate profile** - Bachelors degree in Information Security, Computer Science, or a related field. A Masters degree is preferred. - Professional certifications such as ISO 31000/ISO27001, CCSK or CSA certification, CEH, COBIT 2019 are highly desirable. ServiceNow certifications, ITIL will be an added advantage etc - Minimum of 6 years of experience in Information Security governance, Application Security, Cloud security, IT Security, Risk Management, and compliance. - Strong analytical skills with the ability to derive insights from complex data sets. - Excellent communication and interpersonal skills, with the ability to influence and engage stakeholders at all levels. - Proven track record of successfully implementing security improvements in a large, complex organization. - Familiarity with Allianz Group policies and standards is a plus. - Familiarity with basic AI tools is considered an advantage.