IKT Risk & IT Governance Manager

About the role

The IKT Risk & IT Governance Manager will lead the identification, assessment, monitoring and reporting of ICT and cyber risks for Generali Osiguranje. You will shape the risk appetite, control framework and governance model while supporting digital transformation initiatives.

Key responsibilities

• Manage ICT and cyber risk registers, including identification, assessment, monitoring and reporting.
• Define and track risk‑adjusted indicators (KRI), risk appetite frameworks and the effectiveness of IT controls.
• Develop, maintain and align IT governance frameworks, policies, standards, procedures, ICT strategy and road‑maps.
• Coordinate compliance activities for DORA, HANFA, GDPR, ISO and other regulatory requirements, preparing documentation for audits and inspections.
• Prepare reports for senior management, the Group, regulators and control functions, collaborating with process owners on responsibilities, controls and KPI/KRI metrics.
• Participate in internal and external audits and follow up on corrective actions.
• Assess risks related to outsourcing, suppliers, critical ICT service providers, new technologies, cloud services and infrastructure solutions.
• Support strategic IT and business projects, digital transformation and the definition of governance models for new systems and processes.

Required profile

• University degree in technical, computer science, mathematics or economics.
• Minimum 3 years of experience in IT risk management, IT governance, information security, internal audit or regulatory compliance.
• Preferable experience in the financial, insurance or banking sector.
• Strong knowledge of IT governance frameworks (COBIT, ITIL), DORA regulation, operational risk and cyber security.
• Understanding of IT infrastructure, applications, cloud environments and IT operations.
• Experience drafting policies, procedures and standards, and managing audits and regulatory requirements.
• Advanced use of MS Office and fluent English.
• Relevant certifications (CRISC, CISA, CGEIT, ISO 27001 Lead Implementer/Auditor, ITIL Foundation) are a plus.

Required skills

• COBIT
• ITIL
• DORA
• ISO 27001 Lead Implementer
• ISO 27001 Lead Auditor
• CRISC
• CISA
• CGEIT
• MS Office

What we offer

• Permanent employment with a probationary period.
• Flexible sliding working hours and hybrid work model with home‑office subsidy.
• Christmas and Easter bonuses, annual bonus, meal allowance and additional leave for personal events.
• Discounted Multisport card.
• Inclusive culture that promotes work‑life balance, continuous learning and professional development.