ICT Risk Manager, Risk Management Division

Looking for the best place to work where your ideas will matter and you will feel an important part of the team...

This is exactly what you will find with us unique opportunities for skills development, acquiring key experience, a great package of benefits and, above all, stable support on the road to success.

What you'll be doing

• Building, maintaining, and applying an effective and independent ICT Risk Management function in the Bank and its subsidiaries through:
• Identifying and measuring the ICT risks to which the Bank is or may be exposed;
• Performing regular assessments of changes and enhancements to regulatory requirements related to ICT risk management, including the impact of such changes on the Bank’s activities;
• Drafting advisory materials for the Management Board and Supervisory Board of the Bank to support the adoption of adequate preventive measures with regard to the rules, guidelines, standards, and best practices applicable to the Bank in the field of ICT risk management;
• Preparing reports for the CRO, the Management Board, and the Supervisory Board on relevant ICT risk management topics, including, but not limited to, the timely escalation of material risks and findings;
• Forming an independent expert view of the Bank’s ICT risk profile and challenging the decisions of the CIO, CISO, and business owners regarding cloud, outsourcing, and digital initiatives.

What you'll need to succeed

• Master’s degree in Information Technology, Cybersecurity, Information Security, Economics, or Finance, with experience in ICT risk management;
• Minimum 3 years of experience in ICT risk management, cybersecurity, information security, IT audit, or ICT governance within the banking or financial sector, experience in an independent risk or control function is considered an advantage;
• In-depth knowledge of: DORA and the applicable RTS/ITS; CRD and the EBA Guidelines on Internal Governance; ICT governance; cybersecurity; information security; cloud computing; third-party risk management; business continuity and disaster recovery; ICT change and project risk; ISO 27001/27005; the NIST Cybersecurity Framework; COBIT; ITIL; and architecture, infrastructure, applications, and data platforms;
• Preferred certifications (considered an advantage): CISA, CISM, CRISC, ISO 27001 Lead Auditor/Lead Implementer, or equivalent;
• Fluency in English, with strong analytical, organizational, and communication skills;
• Native-level proficiency in Bulgarian.

What we offer:

• Christmas payment;
• Food vouchers;
• 25 days paid leave;
• Work-from-home options;
• Holiday leave for birthday;
• Additional day-off for volunteering
• Preferential terms of loans;
• Corporate recreational facilities;
• Additional health and life insurance;
• MultiSport cards and fitness centers in our Head offices;
• and many more...

Learn more about Us:

At UniCredit, we explore bold, innovative ideas, delivering products and solutions that enable people to live more successful and fulfilling lives. Our ambition is to be the Bank for Europe's future - and we look for people who are willing to walk with us in this direction.

Our business creates investments, resources, and new opportunities that drive our employees' growth by providing a unique and dynamic professional journey. We want you to bring your talents and strengths to the team and create a meaningful career that gives back as much as you achieve.

We believe great work comes from a great work environment and a strong set of values. We put our values of Integrity, Ownership and Caring at the heart of our decision-making and everything we do. They play a fundamental role in allowing us to unlock our potential and amount to our Purpose: to empower communities to progress.

We are building a global team of motivated people who want to change the way we do banking and bring real benefits to our clients.

If you are a curious, ambitious, and results-driven individual looking to make a difference, we would love to meet you!

UniCredit is an equal opportunity employer. We stand together in nurturing a workplace that welcomes diverse thinking and inclusive behaviors.

Making all voices heard and leveraging “diversity of thought" regardless of gender identity, age, race, ethnicity, sexual orientation, ability, cultural background, we ensure sustainable growth and new business opportunities, a strong drive for innovation and creativity, as well as a general improvement of the work climate with positive impact on productivity, well-being and engagement of our people.

Only shortlisted candidates will be invited!

The submission of personal data is voluntary. “UniCredit Bulbank” AD, in its role of data controller, guarantees that appropriate safeguards will be implemented in the processing of your data during the recruitment process and safe-keeping will be in compliance with the provisions of applicable legislation.