Head of ICT & Security Risk Management (Permanent)

About the role

We are looking for an experienced Head of ICT & Security Risk Management to lead our digital operational resilience strategy and ensure full compliance with the EU Digital Operational Resilience Act (DORA) and other regulatory requirements.

Key responsibilities

• Establish, maintain and govern a comprehensive ICT risk management framework.
• Protect the bank against cyber threats, operational disruptions and third‑party risks while supporting business growth.
• Develop and enforce ICT risk policies, procedures and governance structures.
• Lead the Digital Operational Resilience testing program, including vulnerability management, threat‑led penetration testing and ICT risk assessments.
• Implement continuous monitoring and threat‑intelligence programs to identify emerging risks.
• Define and track KRIs and KPIs for ICT risk management.
• Provide expert advisory and regular reporting to the Executive Committee and Board on risk appetite, tolerance and regulatory expectations.
• Foster collaboration across IT, Risk, Compliance and operating units and deliver training to strengthen ICT risk culture.
• Lead and manage the ICT and Security Risk Management team.

Required profile

• Significant experience in information security and ICT risk management.
• Educational background in Computer Science, IT or Information Security.
• Professional certifications such as CISM, CRISC, CISSP or CISA are highly desirable.
• Deep knowledge of ICT risk frameworks, ISO 27001, NIST and DORA.
• Strong analytical skills, attention to detail and a proactive, growth‑mindset.

Required skills

• ICT risk management methodologies
• ISO 27001
• NIST framework
• DORA compliance
• SIEM
• DLP
• Endpoint protection
• Threat intelligence
• Vulnerability management
• Penetration testing
• KRIs and KPIs
• Continuous monitoring

What we offer

• Strategic leadership role within a leading bank.
• Opportunity to shape digital resilience at an enterprise level.
• Competitive compensation and benefits package.