Patch Management Process Owner (m/f/d)

About the Job

The Patch Management Process Owner is accountable for the end-to-end governance and execution of the patch management process, ensuring timely pro-active patching as well as fast and effective remediation of vulnerabilities across the IT estate.

In this role, you will act as the primary point of accountability for patch compliance, working closely with technical teams, security, and audit functions to maintain a strong cyber resilience posture.

What you do

• Own and continuously improve the patch management process, policies, and standards. Prioritize and schedule patch cycles based on availability, risk, severity, and business impact.
• Coordinate with infrastructure, application, and security teams to ensure timely pro-active patching and fast and effective remediation of critical and high-severity vulnerabilities.
• Track, monitor, and report patch compliance status to senior stakeholders, security, and audit teams. Manage exceptions and risk acceptances where patches cannot be applied within standard timelines, ensuring appropriate approvals and documentation.
• Support internal and external audits related to vulnerability and patch management, providing evidence of process adherence.
• Identify and drive automation opportunities to improve patch deployment speed and consistency.
• Maintain alignment with regulatory requirements (e.g., DORA ICT risk management) and internal security policies.
• Escalate systemic risks or recurring non-compliance to relevant stakeholders.

What you bring

• 10+ years of experience in IT operations, vulnerability management, or security operations, with demonstrated experience owning or contributing to a patch/vulnerability management process at scale and solid understanding of vulnerability management lifecycles, CVSS scoring, and remediation prioritization.
• Familiarity with patch management tooling (e.g., SCCM, WSUS, Ansible, or equivalent), understanding of IT infrastructure across server, endpoint, and network environments.
• Experience working with or supporting audit processes, strong analytical and risk-prioritization skills. Clear, structured communication - able to report to both technical teams and senior stakeholders. Ownership mindset with ability to work independently and drive process improvements.
• Stakeholder management across cross-functional and possibly cross-country teams. Comfortable operating in a regulated, audit-sensitive environment.
• Proficiency in Power BI for process and performance reporting; ability to design, interpret and evolve dashboards that turn Patch Management data into decisions. Sound awareness of regulatory requirements affecting IT operations (e.g. DORA, NIS2, etc.) and how they translate into process controls.
• Reliability, responsibility, commitment and strong ownership for the quality of the processes you govern. Know-how and experience with additional ITSM processes as well as availability management are a plus.
• Business fluent in English; additional languages are a plus. Not a people-management role, but requires influence and coordination across multiple technical and governance teams.
• Familiarity with AI technologies and GenAI platforms is a strong advantage.

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform and innovate the infrastructure, applications and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Find us at: www.linkedin.com/company/allianz-technology.

Commitment to Integrity, Fairness & Inclusion

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

We at Allianz believe in a strong inclusive culture that encourages people to speak their minds, get involved and question the status quo. We are proud to be an equal opportunity employer and encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love, or what you believe in. We therefore welcome applications regardless of race, ethnicity or cultural background, age, gender, nationality, religion, social class, disability, sexual orientation, or any other characteristics protected under applicable local laws and regulations.

To Recruitment Agencies

Allianz Technology has an in-house recruitment team that sources great candidates directly. Therefore, Allianz Technology does not accept unsolicited resumes from agencies or search firm recruiters.

When we do work with recruitment agencies, that engagement is formalized by a contract. Fees will only be paid when there is a contract in place. Without a contract in place, we will not accept invoices on unsolicited resumes, even if the candidate was ultimately employed by Allianz.

 103805 | Operations | Professional | Non-Executive | Allianz Technology | Full-Time | Permanent