Information Security Officer (m/f/d)_2934

About the Job

The Local Information Security Officer (LISO) for Allianz Technology Romania is a key role within the Allianz Technology’s global IS organization. The LISO is accountable for the information security of the environment supporting the Allianz businesses in Allianz Technology Romania, including oversight of related ISMS activities, risk identification, assessment, prevention, and remediation.

The LISO provides advice to the local Allianz Technology Functions with respect to Information Security risk areas, included services provided by 3rd parties. In his/her function, the LISO will be instrumental in building up and integrating IS assurance capabilities and have a direct reporting line to the Allianz Technology Head of Operations as well as to the Regional ISO.

What you do

• Oversee the Information Security function in Allianz Technology Romania, acting as the central contact for information security-related matters and liaising with central Information Security Teams, business units, partners, and customers.
• Ensure compliance with Group-wide standards, regulatory requirements, and industry security standards across all Allianz Technology services and projects, while supporting the implementation of the Group-wide Information Security framework.
• Lead local Information Security Steering Boards, support the preparation of Information Security action plans, and assist the local executive body in meeting regulatory governance requirements related to Information Security.
• Assess and address deviations from security policies and contractual security provisions, develop strategies to mitigate identified information security risks, and oversee the compliance reporting process for local entities.
• Ensure the effective implementation of Information Security principles and procedures throughout the full-service lifecycle, including services provided by external parties and outsourcing partners, while systematically assessing the effectiveness of security controls.
• Manage security risk processes, including conducting security risk assessments, addressing deviations, and developing mitigation strategies, while contributing to defining contractual security provisions and ensuring third-party assessments.
• Promote knowledge and awareness of Allianz Technology security requirements and processes, contribute to the regional and global Allianz Technology ISO community, and support local management in meeting their regulatory Information Security governance obligations.

What you bring

• University degree in computer science, natural sciences etc. or equivalent professional experience.
• Long track record of experience in IT, 5 years+ experience in Information Security related fields and/and or risk management. Professional experience with supplier management (including Cloud providers), IT outsourcing and relevant control frameworks; track record in defining and monitoring contractual information security provisions.
• Sound knowledge of IT security technology, architecture and processes and profound knowledge of information security management systems and relevant industry standards and control frameworks (in particular ISO270xx, COBIT2019); local regulatory standards
• Proven track record in people management and/or project management in complex enterprise environments.
• Ability to cope with high workload, and being able to exercise good levels of independence, judgment and initiative.
• Proficient in English language, excellent international communication skills including the ability to prepare professional documentation for various audiences and senior management.
• Desirable certifications: CISM/ CISSP; ISO27001 Lead Implementer/Auditor.
• Familiarity with AI technologies and GenAI platforms is a strong advantage.

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.