Senior ICT Risk Manager – Independent Second Line – Vienna, Austria

Senior ICT Risk Manager – Independent Second Line – Vienna, Austria

In this high impact role, you will provide dedicated ICT Risk leadership with the Western Union International Bank’s independent Second Line of Defence (2LoD). You will oversee and challenge how First Line teams identify, assess, manage and remediate ICT risk. You will have regular access to the Management Board and engage with auditors and supervisor authorities with regards to ICT Risks, through the Bank’s established governance arrangements.

This is an opportunity to shape a dedicated ICT risk oversight capability for an Austrian bank operating within a global leader in cross-border money movement. You will combine local regulatory influence with access to international technology, cyber, payments and risk specialists, helping protect the resilience of services used by customers around the world.

Role Responsibilities

• Own and continuously enhance the ICT Risk Management Framework, including policies, standards, governance, controls, and reporting.
• Act as the independent Second Line of Defence, providing oversight and challenge of ICT risk management activities across the Bank.
• Define, monitor, and report on ICT risk appetite, Key Risk Indicators, thresholds, and escalation protocols.
• Lead and oversee DORA compliance activities, ensuring alignment with applicable European regulatory requirements and industry best practices.
• Develop and oversee the Digital Operational Resilience Testing Programme, including scenario-based testing, resilience exercises, and vulnerability assessments.
• Provide oversight of ICT incident management, regulatory reporting, post-incident reviews, and remediation activities.
• Ensure effective integration of ICT risk management with Business Continuity Management and Disaster Recovery frameworks.
• Oversee ICT third-party and outsourcing risk governance, including criticality assessments, concentration risk, contractual requirements, and exit planning.
• Coordinate regulatory engagements, audits, and supervisory reviews, serving as the primary contact for ICT risk and operational resilience matters.
• Prepare and deliver reporting on ICT risk posture, resilience, and emerging risks to senior management, committees, and the Management Board.

Role Requirements

• University degree or relevant professional qualification.
• At least seven years of relevant experience in ICT risk management, technology risk, information security, IT audit or operational resilience, including independent oversight within a regulated financial services environment.
• Proven experience implementing or managing DORA, EBA ICT Guidelines, or comparable ICT risk and regulatory frameworks.
• Experience managing regulatory inspections, supervisory engagements, audits, or regulatory reviews.
• Experience overseeing third-party risk and outsourced ICT services.
• Strong knowledge of ICT risk and governance frameworks, including DORA, PSD2, ISO 27001, NIST, and COBIT.
• A relevant professional certification such as CRISC, CISM, CISSP, CISA or an equivalent risk, security or audit qualification is desirable.
• Fluent English language skills, both written and verbal. German fluency is preferred.

Work Shift

HYBRID – Western Union values in-person collaboration, problem solving, and ideation whenever possible. The expectation is to work from the office a minimum of three days a week.

Benefits

You will have access to short-term incentives, multiple health insurance options, accident and life insurance, and development platforms. Austria-specific benefits include comprehensive life and medical cover, contributory pension plan, luncheon vouchers, employee discount programs and partner benefits.

Salary

The minimum gross annual salary for this position is EUR 80,250. The actual offer will reflect the successful candidate’s experience, qualifications and market positioning and may be significantly above this minimum.