22 oct
|
Allianz
|
España
130 years of trust, time to shape what's next.
Allianz Group is one of the world's leading insurers and asset managers - built on over a century of stability, expertise, and financial strength.
Allianz Services is where that legacy meets the future.
8,200+ people.
Eight countries.
Three continents.
We deliver specialized services to clients within Allianz Group, powered by AI, advanced analytics, and a mindset that refuses to stand still.
From core insurance operations to engineering and consulting services, we reimagine how insurance works.
What truly sets us apart are our people and the trusted partnerships we build, anchored in our values of expertise, integrity, and empowerment.
We don't support the business.
We shape it.
Role Overview: We are looking for an Information Security Functional Monitoring (m/f/d) for our modern and innovative location: Allianz Services, Barcelona.
You will be part of the Digital Resilience as a Service division, working closely with Group Information Security to steer, monitor, and assess the Information Security compliance maturity of Allianz entities worldwide, with a particular focus on technical security domains such as application security, cryptography, network security, and infrastructure protection.
A key objective of this role is to enhance and streamline the Group-wide Functional Monitoring processes by evaluating self-assessments, identifying and tracking non-compliances, and providing subject-matter expertise to challenge technical controls.
You will support the development and implementation of improvement plans to strengthen overall compliance and ensure alignment with Group Information Security policies.
What you do:
Collaborate closely with business units and other key functions across the group to ensure effective steering and governance of all Allianz entities in alignment with Group Information Security Policies.
Conduct in-depth reviews and interviews on Information Security compliance self-assessments across Allianz entities globally, with a focus on evaluating technical security controls (e.G., application security, cryptography, network security, endpoint protection, cloud security).
Support the ongoing, proactive monitoring and reporting of non-compliances and control deficiencies related to Information Security risks, providing technical challenge and expertise during assessment of compliance.
Act as a technical subject-matter expert within the Functional Monitoring team, supporting colleagues in the evaluation of complex technical domains and providing guidance on industry best practices.
Facilitate OE user-group discussions, promoting the exchange of best practices, providing updates on technical security topics, and driving the continuous improvement of Information Security Compliance.
Ensure comprehensive steering and governance of all Allianz entities.
Support key general Information Security initiatives and solutions.
These initiatives aim to strengthen Allianz's cyber resilience, ensure regulatory compliance, and minimize risks of data leakage and cyber-attacks.
What you bring:
Strong technical knowledge across one or more of the following domains: application security, cryptography, network security, cloud security, identity and access management, or endpoint protection.
Experience in the implementation of regulatory and industry frameworks regarding Information and Cyber Security (e.G. ISO *, NIST CSF, CIS Controls, DORA, NIS2).
Practical experience and certification (e.G. CISM, CISA, CRISC, CISSP, ISO * Lead Auditor) in implementing and reviewing Information Security governance and management systems.
Proven track record in working within large and diverse international organizations.
Fluent in English; proficiency in a secondmajor language (e.G. German, Italian, French) is a plus.
Proven track record in strategic management and monitoring within large multinational environments, with experience in leading without authority.
Ability to assess and challenge the design and effectiveness of technical security controls, translating technical findings into risk-based language for senior stakeholders.
Experience in Information Security Audit, Compliance, and the use of Governance, Risk and Compliance (GRC) tools is a plus.
Background in project management, particularly with a focus on Information Security, is a plus.
Strong analytical skills complemented by excellent soft skills, with the ability to communicate complex technical topics clearly and concisely to key (senior) stakeholders.
What we offer: We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl.
up to 25 days per year working from abroad.
We believe in rewarding performance and our compensation and benefits package includes a c
📌 Information Security Functional Monitoring (España)
🏢 Allianz
📍 España