About this role

Job purpose

The IT Governance, Risk and Compliance (GRC) Lead owns and continuously develops the IT governance, risk and compliance framework of Allianz Direct and acts as trusted advisor to senior management and governance bodies on digital and information risk. The role translates Allianz Group requirements and external regulation into a pragmatic operating model, creates transparency on digital and information risks, and enables accountable risk-based decisions across business and IT. Working closely with Business Owners, IT, Information Security, Risk Management, Compliance, Internal Audit and key service providers, the IT GRC Lead ensures that governance is embedded in day-to-day delivery rather than treated as a separate control exercise.

Key responsibilities

You work independently and are accountable for the areas below. Where Business Owners or senior management take the decision (for example on risk acceptance), you provide the challenge, transparency and recommendation that make it possible.

• IT Governance Framework: Own the local IT governance and control framework. Drive the annual adoption and refresh of Allianz Corporate Rules for IT & IS and related control requirements, define clear decision rights and accountabilities, and ensure that regulatory or Group changes are implemented during the year.
• Digital and Information Risk Management: Lead the end-to-end process for identifying, assessing, documenting, treating and monitoring digital and information risks. Consolidate the risk view, challenge remediation plans, monitor risk acceptance and escalation, and provide decision-ready reporting to senior management and governance bodies. This is done in collaboration with Information Security.
• Business Application Scoping: Orchestrate the annual and event-driven scoping of Business Applications, Information Assets and underlying IT Services. Enable Business Owners to determine protection requirements, inherent risk and minimum control requirements, and ensure complete and accurate documentation in the IT and IS GRC system. This is done in collaboration with Information Security.
• Fit-Gap Analysis and Control Assurance: Manage the annual Fit-Gap Analysis using available evidence and provider assurance, including assurance from Allianz Technology. Identify actual control gaps, assess residual risk, agree target measures with accountable owners, and track remediation through closure.
• IT Compliance: Coordinate the annual Corporate Rules for IT self-assessment and ad-hoc Group assessments. Create transparency on non-compliance, ensure that findings feed into IT risk management, and follow up on remediation actions and evidence.
• Audit, Regulatory and Stakeholder coordination: Act as the central IT contact for internal and external audits and relevant regulatory reviews. Coordinate evidence and management responses, facilitate alignment across the first and second lines of defense, and ensure consistent communication with Allianz Group functions and service providers.
• GRC reporting and continuous improvement: Define meaningful KPIs, deliver concise, decision-oriented reporting to the CIO and governance bodies, improve process quality and automation, and strengthen the GRC tool landscape, especially Archer and connected information-domain repositories.

What you bring

• University degree or equivalent qualification in Information Technology, Cybersecurity, Risk Management, Business Administration or a related field.
• Minimum 5–7 years of relevant experience in IT governance, digital risk, information risk, technology controls, IT compliance or audit, ideally in insurance, financial services or another regulated industry.
• Practical knowledge of governance and control frameworks such as COBIT, ISO/IEC 27001, ITIL and the three-lines model, with the ability to translate requirements into workable processes and controls.
• Sound understanding of European financial-services regulation and supervisory expectations, particularly the Digital Operational Resilience Act (DORA).
• Hands-on experience with application and information-asset scoping, control assessments, Fit-Gap Analysis, risk treatment, issue remediation and management reporting.
• Experience with GRC platforms such as Archer.
• Strong analytical judgement and the confidence to challenge constructively, prioritize material risks and drive decisions across organizational boundaries, up to senior-management level.
• Excellent facilitation, stakeholder-management and communication skills, including the ability to present complex risk topics clearly to senior management.
• Fluent English, written and spoken.
• Nice to have : Familiarity with BaFin requirements and Allianz Corporate Rules for IT; knowledge of ServiceNow, ADONIS or ADOIT; German or another Allianz Direct market language.

Allianz Direct welcomes applications from all qualified candidates, regardless of gender, age, origin, disability, religion or belief, sexual orientation or identity.

Job location : Germany, Spain or Netherlands

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.

We at Allianz believe in an inclusive workforce and are proud to be an equal opportunity employer. We encourage you to bring your whole self to work, no matter where you are from, what you look like, who you love or what you believe in. We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, disability or sexual orientation.

Great to have you on board. Let's care for tomorrow.

Note: Having different strengths, experiences, perspectives and approaches is an integral part of Allianz‘ company culture. One means to achieve diverse teams is a regular rotation of Allianz Executive employees across functions, Allianz entities and geographies. Therefore, the company expects from its employees a general openness and a high motivation to regularly change positions and collect experiences across Allianz Group.