Information Security Manager

About the job 

Information Security & Resilience is the core team and central driver for Information Security at Allianz Technology. The division is tasked to continue evolving a strong security organization, establishing global security solutions and countermeasures and to oversee the effectiveness and guide the implementation of security controls.  

The Information Security Manager is a key role within the Security Function. He/She will oversee the effective implementation of Information Security requirements/controls by effectively managing security risks within the organization, as well as in all services provided by Allianz Technology as shared service provider to its Allianz-internal customers, including those provided by 3rd-party suppliers and outsourcing providers.  

What you do 

• Serve as the central contact for information security-related matters in service provisioning, including interfacing with business units, partners, customers, and safeguarding functions.  

• Promote knowledge and awareness of Allianz Technology's security requirements and processes.  

• Coordinate, track, and monitor information security risks with risk owners and ensure effective implementation of security principles throughout the service lifecycle, including external parties.  

• Systematically assess the effectiveness of security controls in services provided by Allianz Technology and its partners, ensuring compliance with Group-wide standards, regulatory requirements, and industry standards.  

• Develop security policies, guidelines, and procedures, contributing to the definition of contractual security provisions for third-party management.  

• Manage security risk assessments, address deviations from security policies, and develop strategies to mitigate identified information security risks.  

• Lead security projects and initiatives, working collaboratively with cross-functional teams to improve processes and automate security measures.  

What you bring 

• University degree in computer science, natural sciences, or equivalent professional experience.  

• Over 5 – 7 years of relevant experience in IT and information security-related fields, with a strong track record in risk management/control frameworks, with experience in developing security policies and control documentation.  

• Sound knowledge of IT security technology, architecture, and processes, including information security management systems and industry standards (ISO2700x, COBIT5/2019, DORA, NIS2).  

• Technical skills in Power BI, Power Automate and AI  

• Proven experience in supplier management, IT outsourcing, and defining/monitoring contractual security provisions with public cloud and SaaS providers.  

• Project management and leadership experience in complex enterprise environments, preferably within agile teams.  

• Proficiency in English with excellent international communication skills, capable of preparing professional documentation for various audiences and senior management.  

What we offer 

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad. 

• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location). 

• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered. 

• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.