Lead independent second‑line oversight and challenge of ICT risks across Allianz Global Investors.
Responsibilities
Lead independent second‑line oversight and challenge of ICT risks across infrastructure, applications, information security, technology development and change, operations, resilience, and business continuity.
Lead independent risk and control assessments, challenging first‑line risk assessments, governance and control frameworks, as well as control design, implementation, and operating effectiveness.
Monitor and assess the ICT risk profile using key risk indicators, incidents, deficiencies, and risk and control assessments; evaluate risk exposure against established risk appetite and tolerance thresholds, and escalat...
Provide independent risk input and challenge for material technology projects, transformations, and system changes, with a particular focus on resilience, security, critical business services, and client impact.
Provide risk‑based challenge of material technology architecture and cloud decisions, particularly where these may affect resilience, security, data protection, or third‑party dependencies.
Requirements
University degree in IT, Computer Science, Business, Economics, Finance, Risk Management or a related field, or equivalent relevant professional experience.
Leads the Third-Party Technology Risk function and a team of technology risk professionals accountable for driving sustained reduction in vendor risk exposure. Sets strategy, priorities, and standards for how third-party technology risk is identified, measured, challenged, and reduced across the enterprise.
Locations (3)
Pittsburgh, Pennsylvania, United States
Dallas, Texas, United States
Washington, DC, United States
Compensation
Base Salary: $146,300.00 – $326,040.00. This role is incentive eligible with the payment based upon company, business and/or individual performance.
Responsibilities
Leads the Third-Party Technology Risk function and a team of technology risk professionals accountable for driving sustained reduction in vendor risk exposure.
Sets strategy, priorities, and standards for how third-party technology risk is identified, measured, challenged, and reduced across the enterprise.
Leads the design, development, and continuous improvement of the third-party technology risk program to meet business, risk appetite, and regulatory expectations.
Establishes the methodology, thresholds, and operating model used to evaluate critical and high-risk technology vendors, cloud service providers, and material fourth parties.
Directs oversight and credible challenge of technology-relevant third-party risk assessments, inherent risk tiering, due diligence depth, residual risk conclusions, exceptions, and risk acceptance decisions performed across the enterprise.