Information Security Functional Monitoring (m/f/d)

• Collaborate closely with business units and other key functions across the group to ensure effective steering and governance of all Allianz entities in alignment with Group Information Security Policies.
• Conduct in-depth reviews and interviews on Information Security compliance self-assessments across Allianz entities globally, with a focus on evaluating technical security controls (e.g., application security, cryptography, network security, endpoint protection, cloud security).
• Support the ongoing, proactive monitoring and reporting of non-compliances and control deficiencies related to Information Security risks, providing technical challenge and expertise during assessment of compliance.
• Act as a technical subject-matter expert within the Functional Monitoring team, supporting colleagues in the evaluation of complex technical domains and providing guidance on industry best practices.
• Facilitate OE user-group discussions, promoting the exchange of best practices, providing updates on technical security topics, and driving the continuous improvement of Information Security Compliance.
• Ensure comprehensive steering and governance of all Allianz entities.
• Support key global Information Security initiatives and solutions. These initiatives aim to strengthen Allianz's cyber resilience, ensure regulatory compliance, and minimize risks of data leakage and cyber-attacks.

What you bring: 

• Strong technical knowledge across one or more of the following domains: application security, cryptography, network security, cloud security, identity and access management, or endpoint protection.
• Experience in the implementation of regulatory and industry frameworks regarding Information and Cyber Security (e.g. ISO 27001, NIST CSF, CIS Controls, DORA, NIS2).
• Practical experience and certification (e.g. CISM, CISA, CRISC, CISSP, ISO 27001 Lead Auditor) in implementing and reviewing Information Security governance and management systems.
• Proven track record in working within large and diverse international organizations.
• Fluent in English; proficiency in a second major language (e.g. German, Italian, French) is a plus.
• Proven track record in strategic management and monitoring within large multinational environments, with experience in leading without authority.
• Ability to assess and challenge the design and effectiveness of technical security controls, translating technical findings into risk-based language for senior stakeholders.
• Experience in Information Security Audit, Compliance, and the use of Governance, Risk and Compliance (GRC) tools is a plus.
• Background in project management, particularly with a focus on Information Security, is a plus.
• Strong analytical skills complemented by excellent soft skills, with the ability to communicate complex technical topics clearly and concisely to key (senior) stakeholders.
• We highly welcome candidates with a genuine interest and affinity for Information Technology (IT) and Generative Artificial Intelligence (GenAI), as these attributes are considered valuable assets to our team.

What we offer: 

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.