IT Risk Manager (m/f), France

We are a strong global community connected by shared values, varied experiences, and a common goal — to grow with purpose. Our People Attributes reflect the values we live by and the mindset we bring to every challenge, every day.

We truly care for our employees, their individual needs, and their aspirations. We are a thriving community of thinkers, innovators, and individuals who share our purpose: We secure our future.

Tasks

• Perform IT Risk Vectors Assessment at AZ Trade Group level to address risks and mitigation actions.
• Lead the planning and execution of IT control testing, including evidence collection, review, and follow-up with service owners and AZ Tech for any missing documentation.
• Manage and coordinate the delivery of IT control testing to meet agreed deadlines.
• Review and document control testing results, and collaborate with AZ Tech and service owners to agree on mitigation plans for any control deficiencies.
• Prepare control test result reports for Risk Committees (RiCos) and upload test results into ORGS.
• Drive progress on mitigation actions and follow up with AZ Tech and service owners on their execution.
• Support the enhancement of the 2nd Line of Defense (2LoD) IT Risk Management (ITRM) framework, considering regulatory expectations such as the Digital Operational Resilience Act (DORA).
• Assist in covering IT and Information Security (IS) topics in relevant Governance Committees.
• Provide support in resolving escalated IT and IS issues.
• Communicate transparently with all IT stakeholders, keeping them informed of potential issues and escalating any problems or delays

Profile

• Fluent in English (speaking and writing)
• Knowledge of IT regulation
• Communication and delivery skills
• Capacity to teach/train/explain
• Ability to lead meeting/workshop