IT Risk Manager ( Hybrid,Zagreb)

At TechBiz Global, we are providing recruitment service to our TOP clients from our portfolio. We are currently seeking an IT Risk Manager to join one of our clients' teams in Zagreb, Crotia. If you are familiar with the principles and standards of ICT and security risk assessment and management, you might be exactly the person we are looking for

In this role, you will act as an internal consultant on IT risk management matters and be responsible for establishing and developing IT risk management processes, overseeing the implementation of measures to mitigate identified risks, and managing the IT risk assessment process. You will work in a modern team where your role is essential and directly contributes to the security of the Bank’s entire business operations.

What will you do?

• Organise regular IT risk assessments, support the definition of risk treatment measures, and periodically monitor their implementation.

• Conduct training on IT risk assessment and management.

• Prepare reports related to your area of responsibility.

• Participate in the implementation of IT controls and monitor their effectiveness.

• Participate in the Bank’s business and IT projects, as well as contribute to and lead security projects.

• Participate in the outsourcing risk assessment process.

• Participate in security assessments of suppliers.

• Monitor applicable legislation and leading practices in information security and IT risk management.

• Develop, regularly update, and improve all information and cybersecurity documentation (policies, procedures, decisions, etc.) in accordance with group directives, legal requirements, applicable standards, best practices, and recommendations.

What are we looking for?

• A university degree in Electrical Engineering, Computer Science, Information Technology, Mathematics, or a Master’s degree in Electrical Engineering, IT, Mathematics, or Economics, equivalent to 300 ECTS credits. Exceptionally, candidates with a higher professional education degree may be considered if they have at least 7 years of relevant work experience.

• 5 years of professional experience in IT risk management or a related field.

• Certifications in information security are an advantage (CISM, CRISC, CISSP, CISA, ISO 27001, ISO 27005, CBCI).

• Knowledge of IT risk assessment and management principles.

• Knowledge of IT process management and information security principles.

• Familiarity with banking processes is an advantage.

• Knowledge of change management processes.

• A proactive approach, strong organisational skills, and attention to detail.

• A strong results-oriented mindset and the ability to work effectively in a team.

• Proficiency in spoken and written English.

What do we offer?

• Continuous professional development through working with the latest technologies, methodologies, and experienced specialists.

• An international working environment that encourages knowledge sharing and places a strong emphasis on the development of both individuals and the team.

• A hybrid working model, including a company laptop and mobile phone.

• Professional training relevant to your area of expertise.

• Autonomy and opportunities to bring creativity into your work.

• Additional financial benefits, including Christmas and Easter bonuses, a holiday allowance, gifts for children, referral bonuses, meal allowances, and employer contributions to a pension fund.

• A paid medical check-up, additional health insurance, a subsidised Multisport membership, and a minimum of 26 days of annual leave.

• And most importantly, a great team and a positive working atmosphere! 😊