ICT Risk Analyst – IT Security & Risk Management

About the role

The ICT Risk Analyst will support China Merchants Bank Europe in safeguarding its information technology environment. Reporting to the Risk Management Function, you will design, implement and monitor security policies, ensuring compliance with EU regulations and the bank’s global standards.

Key responsibilities

• Develop and maintain IT security policies, frameworks and control matrices aligned with CMB headquarters.
• Monitor IT systems for security breaches and ensure continuous protection of data and infrastructure.
• Conduct ICT and cybersecurity self‑assessments in line with EU regulations and internal policies.
• Identify regulatory and non‑regulatory IT risks through ongoing risk assessments and propose cost‑effective mitigation measures.
• Collaborate with IT, Risk Management, Legal, Compliance and Operations teams to embed risk controls.
• Work with internal and external auditors on ICT risk topics and provide required documentation.
• Design and deliver training programmes on ICT risk awareness for various bank functions.
• Define and track Key Risk Indicators (KRIs) and report on risk exposure, mitigation actions and incidents.
• Stay abreast of regulatory developments such as DORA and incorporate best market practices.
• Serve as the primary point of contact for all ICT risk management matters.

Required profile

• Demonstrated experience in ICT risk management within a banking or financial services context.
• Strong knowledge of EU ICT regulatory requirements, including DORA.
• Ability to conduct risk assessments, develop policies and communicate findings to senior stakeholders.
• Proven track record of working closely with auditors and cross‑functional teams.
• Excellent analytical and problem‑solving skills with a proactive attitude.

Required skills