ICT Risk Manager, Risk Management Division

At UniCredit, we explore bold, innovative ideas, delivering products and solutions that enable people to live more successful and fulfilling lives. Our ambition is to be the Bank for Europe's future - and we look for people who are willing to walk with us in this direction. To be an example in applying the principles of diversity and equity and in creating an inclusive environment for all is key for the relationships and processes we build.
Our business creates investments, resources, and new opportunities that drive our employees' growth by providing a unique and dynamic professional journey. We want you to bring your talents and strengths to the team and create a meaningful career that gives back as much as you achieve.

- Building, maintaining, and applying an effective and independent ICT Risk Management function in the Bank and its subsidiaries through:
- Identifying and measuring the ICT risks to which the Bank is or may be exposed;
- Performing regular assessments of changes and enhancements to regulatory requirements related to ICT risk management, including the impact of such changes on the Bank’s activities;
- Drafting advisory materials for the Management Board and Supervisory Board of the Bank to support the adoption of adequate preventive measures with regard to the rules, guidelines, standards, and best practices applicable to the Bank in the field of ICT risk management;
- Preparing reports for the CRO, the Management Board, and the Supervisory Board on relevant ICT risk management topics, including, but not limited to, the timely escalation of material risks and findings;

- Forming an independent expert view of the Bank’s ICT risk profile and challenging the decisions of the CIO, CISO, and business owners regarding cloud, outsourcing, and digital initiatives.

- Master’s degree in Information Technology, Cybersecurity, Information Security, Economics, or Finance, with experience in ICT risk management;
- Minimum 3 years of experience in ICT risk management, cybersecurity, information security, IT audit, or ICT governance within the banking or financial sector, experience in an independent risk or control function is considered an advantage;
- In-depth knowledge of: DORA and the applicable RTS/ITS; CRD and the EBA Guidelines on Internal Governance; ICT governance; cybersecurity; information security; cloud computing; third-party risk management; business continuity and disaster recovery; ICT change and project risk; ISO 27001/27005; the NIST Cybersecurity Framework; COBIT; ITIL; and architecture, infrastructure, applications, and data platforms;
- Preferred certifications (considered an advantage): CISA, CISM, CRISC, ISO 27001 Lead Auditor/Lead Implementer, or equivalent;
- Fluency in English, with strong analytical, organizational, and communication skills;
- Native-level proficiency in Bulgarian.

- Christmas bonus;
- Performance bonuses;
- Food vouchers;
- Preferential terms on loans;
- 25 days holiday leave;
- Аdditional holiday leave and birthday gift;
- Additional day-off for volunteering;
- Refer-A-Friend Program;
- Flexible working hours & work from home options;
- Additional health and life insurance;
- MultiSport cards and fitness centers in our Head offices;
- Corporate recreational facilities.

UniCredit is a pan-European leading commercial bank providing best-in-class solutions and services across Italy, Germany, Austria, and Central and Eastern Europe. Our Vision is to be the Bank for Europe's Future. Our Purpose is to Empower Communities to Progress, delivering the best-in-class products and services for all stakeholders, unleashing the potential of our people and our clients across Europe. We serve over 20 million clients, supported by three Group product factories — Corporate, Individual and Payment Solutions — that ensure best-in-class expertise and scalable solutions across all markets. Our integrated model combines local proximity, deep client understanding and Group-wide capabilities, enabling seamless service and outstanding client experience. Digitalisation, operational excellence and a strong commitment to ESG principles underpin our journey, helping us deliver sustainable long-term value for clients, communities, employees and shareholders. Our shared Culture unites our people across all countries, empowering teamwork, driven execution and ambition through Ownership, Integrity and Caring.