Information Security Compliance Monitoring

Job description

About the Job 

Allianz Technology is the Service Provider for the Allianz Group Information Security Function which is responsible for ensuring that Information Security and Cyber Risks, which could potentially impact the successful delivery of Allianz business objectives, are identified and appropriately managed.

It ensures that Allianz  is adequately protected in accordance with legal and regulatory requirements. Additionally, the Allianz Group Information Security Function maintains the Allianz Information Security strategy and oversees Global Identity and Access Management Governance across the Allianz Group. 

One of the main objectives is to improve and streamline Allianz processes of continuously monitoring and assessing performance of the Allianz group's companies against Information Security policies (Functional Monitoring programs). This is achieved by analyzing the Information Security (IS) Compliance self-assessment, tracking and monitoring non-compliances, creating and managing Information Security Risks, and ensuring the development and implementation of comprehensive plans to enhance overall IS compliance levels.

What you do

• Collaborate closely with business units and other key functions across the group to ensure effective steering and governance of all Allianz entities in alignment with Group Information Security Policies
• Conduct reviews and interviews on Information Security compliance self-assessments across Allianz entities globally.
• Lead the ongoing, proactive monitoring and reporting of non-compliances and control deficiencies related to Information Security risks (security control test of design and test of effectiveness)
• Facilitate OE user-group discussions, promoting the exchange of best practices, providing updates, and driving the continuous improvement of Information Security Compliance.
• Ensure comprehensive steering and governance of all Allianz entities. 
• Support key global Information Security initiatives and solutions. These initiatives aim to strengthen Allianz’ cyber resilience, ensure regulatory compliance and minimize risks of data leakage and cyber attacks.

What you bring

• Practical experience and certification (e.g. CISM, CISA, CRISK, ISO27001 Lead Auditor) in implementing and reviewing Information Security governance and management systems.
• Experience of implementation of regulatory and industry frameworks regarding Information and Cyber Security
• Proven track record in working within large and diverse international organizations.
• Fluent in English; proficiency in a second major language (e.g. German, Italian, French) is a plus.
• Proven track record in strategic management and monitoring within large multinational environments, with experience in leading without authority.
• Experience in Information Security Audit,  Compliance and the use of Governance, Risk and Compliance (GRC) tools
• Background in project management, particularly with a focus on Information Security, is a plus.
• Strong analytical skills complemented by excellent soft skills with the ability to communicate complex topics clearly and concisely to key (senior) stakeholders.

 What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.