Risk Manager

Hey

I am Paula, the recruiter for this role. I love to travel around the world and learn about new cultures. Lovely to meet you

Perhaps this is the 10th Job Description you read today, sitting on your couch with Netflix playing in the background, or contemplating your life planning to refresh your career. I am sure by now all offers look the same.

I will be honest with you, at Zurich we do not claim to be perfect, but we are pretty cool If you want to know why, keep reading

But first, THANK YOU for showing interest in our company. We know that a job search can be challenging, but don’t worry, what goes around comes around

**Let’s get straight to the point** I will try to sum up **our DNA** in 2 essential points:

- We love volunteering but we prefer to be Change Activists. What does that mean? We focus our efforts in helping youths in risk of social marginalization and fighting climate change by reforesting parks or woods in Madrid and in the Doñana Forest. This year alone, we have already volunteered for over 14000h
- At Zurich we say it loud and clear: We are proud of our colors, we believe that a diverse and inclusive team makes the difference. We don’t discuss disability, we discuss capability **We want you to be yourself,** without closets in between or glass ceilings making you fragile. 50% of our high responsibility positions are occupied by women (including our Executive Committee). Do you know that we produce our own podcasts about gender identity? We are building a company were everyone is welcome

**At this point you might be asking yourself: Paula, how will be my day to day wearing the blue sweater? I asked that question too.**
- Identify, evaluate, and monitor operational risks, with a particular focus on ICT Risks.
- Ensure regulatory compliance concerning DORA and digital resilience management.
- Record, investigate, and analyze operational events. Monitor action plans to prevent future incidents.
- Coordinate operational and project risk assessments and follow-up on internal controls implementation and issues, especially in topics related to information security, data governance and protection, third-party management and business resilience.
- Prepare clear and structured reports and presentations for management and support in the coordination of ICT Risks forums.
- Participate in Group/ZIE ICT Risks forums and workgroups.
- Contribute to the development and improvement of operational key risk indicators (KRIs).
- Work closely with Operations Governance, Business Resilience, Third-Party, IT, IT Security (GCS) teams, and other key departments.

**How do you know you fit in? I’ll explain**:
Don’t worry, we are not asking you to save the planet or meet 100% of the requirements.
- University degree in Computer Science, IT, Business Administration, or a related field.
- Minimum of 3+ years of experience in operational risk management, Information Governance, Audit and/or Security or related field.
- Knowledge of risk management methodologies, internal control frameworks, cybersecurity frameworks, and relevant regulatory requirements (DORA, GDPR, COBIT, ISO 27001, Solvency II) is a plus.
- Fluent in English, both spoken and written.
- Strong communication and interpersonal skills, with the ability to work effectively across teams and departments.
- Proactive with excellent analytical and problem-solving skills.
- Ability to explain technical concepts and risks to non-technical stakeholders effectively.
- Professional certifications in IT security, audit, and/or risk management (e.g., CISM, CISA, CRISC, CISSP) not mandatory but will be a plus.

Right now, either you feel as great as when you fit into the right size of your jeans or you are thinking “this is not for me” (and that’s ok, we will meet again in a bright future). However, you can share my contact with those near you who you feel might be a fit to the job.

At Zurich we love to live life to the fullest. I would love to know how we can make you happy, but for me, balance between life and work makes the difference. Flexibility and digital disconnection are real and encouraged.

**#PorSerDeZurich,** you can choose the benefits that best fit your needs. We all know that “to each their own”.
- FlexWork: We love flexibility. We want to offer you a flexible hybrid mode so that you can organize your work schedule as you wish. We also offer you a home office extra bonus.
- We believe you learn by doing, which means we allow movement of our employees in between different departments, both locally and at an international level thanks to the program “Talent in Motion”. And so, you can further your knowledge and growth, we offer English classes, training, and a personal mentoring program.
- Flexible remuneration: You will be able to choose what suits you best Choose from medical insurance, training, volunteering programs, kindergarten and so much more
- At Zurich we know that putting a smile on someone else’s face is easier than you t