130 years of trust, time to shape what's next. Allianz Group is one of the world's leading insurers and asset managers - built on over a century of stability, expertise, and financial strength. Allianz Services is where that legacy meets the future. 8,200+ people. Eight countries. Three continents. We deliver specialized services to clients within Allianz Group, powered by AI, advanced analytics, and a mindset that refuses to stand still. From core insurance operations to engineering and consulting services, we reimagine how insurance works. What truly sets us apart are our people and the trusted partnerships we build, anchored in our values of expertise, integrity, and empowerment. We don't support the business. We shape it.

Role Overview

The Third-Party Cyber Risk Management Expert (m/f/d) will play an essential role in the Group CISO team, contributing to the design and implementation of the Third-Party Cyber Risk Management (TPCRM) process and service.

This position will integrate in the Group CISO team, actively supporting the Group's mission to ensure that Allianz's operations remain resilient and secure, particularly in relation to third-party engagements.

What you do:

Actively contribute to the design and implementation of TPCRM processes in alignment with the Digital Operational Resilience Act (DORA) and Allianz Group standards.
Support business owner to conduct comprehensive cyber risk assessments for third-party vendors, identifying potential vulnerabilities, assessing residual risk and following up on mitigation actions.
Collaborate with internal and external stakeholders to ensure effective communication and management of third-party cyber risks.
Develop and maintain monitoring systems to track third-party risk exposure, and provide regular reports to senior management.
Ensure third-party engagements comply with relevant regulations, including DORA, and Allianz's internal policies.
Identify opportunities for process improvements and implement changes to enhance the efficiency and effectiveness of TPCRM activities.
Provide training and awareness sessions to internal stakeholders on third-party cyber risk management practices and principles.

What you bring:

Bachelor's degree in Information Technology, Cybersecurity, Risk Management, or a related field. Advanced degrees are a plus with professional certifications in risk management, IT risk management, or information security (e.g., CISM, CRISC, ISO27001, CISA) are favorable.
Proven experience in cyber risk management, particularly in third-party risk assessment and management as well as proven experience in managing multiple projects at the same time.
Proactive and autonomous in approach to work.
Strong stakeholder management and interpersonal skills.
Expertise in conducting cyber risk assessments and familiarity with DORA requirements and implications.
Ability to work collaboratively within a team and across organizational boundaries.
Basic knowledge in AI technologies, principles and their practical use
We highly welcome candidates with a genuine interest and affinity for Information Technology (IT) and Generative Artificial Intelligence (GenAI), as these attributes are considered valuable assets to our team.

What we offer:

We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

1 Job for Dora Compliance in Spain

Third-Party Cyber Risk Management Expert (m/f/d)