About the Job

The Digital Resilience Officer (DRO) coordinates the implementation and maintenance of digital resilience and IT risk management for the Allianz Technology CTO2 AZP entity. The DRO acts as the local single point of contact (SPOC) for all digital risk and compliance matters, ensuring that group-wide frameworks are applied effectively at the local level and that the entity meets its regulatory obligations under DORA, as well as Allianz Technology corporate rules (AFIRM, ATPR, ATPIT).

The role operates within the COO function and reports functionally and disciplinary to the AZT Head of Branch Operations Allianz Partners

What you do

Establish and maintain effective digital risk controls, lead digital risk identification, assessment and management across applications and services at the local entity, ensure digital risks are managed in line with the DIRM framework and all IT-related risks are moved to Monitoring & Reporting within 30 days of registration, participate in the local Risk Council and report on the status of local digital risks, and act as a risk champion within the branch fostering a strong risk culture.
Oversee responses to customer (Operating Entity) audits, lead management and prioritization of customer audit demand across control and service owners, support Allianz Technology internal audits relevant to the COO function, and support Assurance and Risk Shield activities, including quarterly IT risk reporting to the Central Digital Resilience team for DRRC meetings.
Ensure ITOM compliance and adherence to regulatory requirements (including DORA): conduct IT Compliance Self-Assessment annually (deadline: 30 September each year), ensure identified remediation gaps are logged and tracked as local ITOM risks (deadline: 30 November each year), follow up on prior-year risks and ATPIT deviations, document and report approved deviations, conduct compliance benchmarking across branches, identify deviations from corporate policy, and ensure ATPIT is acknowledged and implemented locally.
Govern TPRM assessments for all services and contracts, ensuring no services or contracts are used without a completed and approved TPRM assessment, ensure 100% of active contracts are documented in the Register of Information (ROI) aligned with DORA reporting requirements, and ensure all contracts comply with tiering/materiality assessment outcomes including mandatory clauses for DORA CIF, Solvency II CIFS/SO, and internal Allianz Technology policy.
Maintain complete and up-to-date D&O trackers for Solvency II CIFS & Significant Outsourcing and DORA CIF, ensure approved exit strategies and validated Business Continuity & Disaster Recovery (BCDR) plans are in place for all DORA CIF and Solvency II CIFS/SO, and maintain evidence of regular testing where required.
Serve as the local coordination point across safeguarding functions (Information Security/LISO, P&R, TPRM, 2nd LoD Risk) and strengthen digital risk management relationships with customers (Operating Entities).
Participate in Central Digital Resilience sessions and engage with global risk communities to shape the future of digital resilience, and utilize communication and training materials provided by the Central DR team, including participation in trainings and awareness sessions.

What you bring

3+ years of experience in Cybersecurity, IT Risk Management, Governance or Compliance with a degree in Information Technology, Computer Science, Cybersecurity, Law or a related discipline with an IT / Cybersecurity focus.
Solid understanding of cybersecurity frameworks and standards (e.g. ISO 27001, NIST, DORA, Solvency II). Familiarity with local and international regulatory requirements and compliance standards applicable to financial services / insurance.
Experience in third-party risk management and contract compliance.
Strong analytical and problem-solving skills; data-driven mindset with experience in data analysis and interpretation.
Excellent written and verbal communication skills in English.
Ability to work collaboratively with cross-functional teams and to present risk topics to senior management.
Desirable: knowledge of the Allianz Technology risk framework (AFIRM, ATPR, ATPIT) or equivalent group-level governance structures; experience with ITOM governance, IT risk registers and control testing. Knowledge of incident response and business continuity / disaster recovery procedures. Professional certification in risk or security (e.g. CRISC, CISM, CISSP or equivalent).
Familiarity with AI technologies and GenAI platforms is a strong advantage.

What we offer

We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

1 Job for Compliance in Spain

Digital Resilience Officer (m/f/d)_2933