SportAlliance
Overview
We are a leading FinTech company at the forefront of digital payment innovation, operating in one of the most heavily regulated financial environments. Our mission is to deliver secure, scalable, and customer-centric financial solutions while maintaining uncompromising adherence to international regulatory standards. By combining technological innovation with rigorous compliance frameworks, we empower businesses and consumers to transact with confidence. As our ICT Risk Manager (m/f/d), you will play a pivotal role in protecting the resilience and integrity of our financial systems. Positioned at the intersection of technology, risk, and governance, you will challenge senior stakeholders, drive risk-aligned decision-making, and ensure our ICT risk posture meets both regulatory expectations and business objectives. This is a unique opportunity to influence the company’s strategic ICT resilience in an environment that thrives on innovation within compliance. Your position in our team
You act as the second line of defence by challenging the CISO, IT Security Architect, DevSecOps Team and Business Units on ICT control adequacy and risk appetite alignment
You consolidate insights from quarterly ICT risk inventories, incident summaries, and vendor risk reports into actionable recommendations
You oversee ICT risk assessment processes and ensure alignment with regulatory frameworks such as DORA, EBA, and GDPR
You partner with Incident Response, Vendor Risk, and Security Testing teams to assess, escalate, and remediate ICT risks
You prepare and deliver consolidated ICT risk reports for executive leadership, Head Risk, and Management
You support ongoing improvement of ICT governance processes, including risk identification, monitoring, and reporting
You will ensure ICT risk management practices remain robust against evolving threats and emerging technologies
Your profile
Bachelor’s degree in Information Security, Risk Management, Computer Science, or related field
Minimum 3+ years of ICT risk management experience within financial services or FinTech
Strong knowledge of risk frameworks (e.g., ISO 27005, NIST, COBIT) and regulatory requirements (e.g., EBA outsourcing guidelines, DORA, GDPR)
Experience with incident response processes, ICT vendor risk oversight, and ICT governance reporting
Excellent stakeholder management skills with the ability to challenge senior leaders constructively
Fluently Englisch (C1) and good German (B2) skills
Having a professional certification (e.g., CISM, CRISC, CISSP, CISA) is a plus
Familiarity with cloud computing risks, encryption, DevOps environments, and API-driven financial platforms is a plus
Experience in consolidating multi-source ICT risk inputs into executive-level reporting is a plus
Understanding of emerging financial technologies such as blockchain, AI, and digital identity is a plus
Your benefits with us
100% remote work within Germany
/
home office
within Germany
possible
30 days annual leave
Offices with flexible workplaces in Hamburg, Eisenstadt, Warsaw, and Melbourne - all equipped with various drinks & snacks.
Our
exclusive gym , next to the Hamburg office, for free use incl.
personal coach
for training and nutrition, available to all employees worldwide
Our unique
CashBack Sport program "Move Republic" , which rewards your daily and sporting activities throughout (Germany)
An
above average pension grant for your company pension scheme
("bAV") in Germany or Austria
Access to Udemy Business – grow your skills with thousands of high-quality online courses
Access to the
employee benefits portal
with the best shopping deals in Germany and Austria
Subsidy
for the
"Deutschlandticket"
(local transport subscription)
Direct communication
channels through the whole company, an open feedback culture and
pronounced appreciation , motivated teams and leads who interact at eye level
#J-18808-Ljbffr
You act as the second line of defence by challenging the CISO, IT Security Architect, DevSecOps Team and Business Units on ICT control adequacy and risk appetite alignment
You consolidate insights from quarterly ICT risk inventories, incident summaries, and vendor risk reports into actionable recommendations
You oversee ICT risk assessment processes and ensure alignment with regulatory frameworks such as DORA, EBA, and GDPR
You partner with Incident Response, Vendor Risk, and Security Testing teams to assess, escalate, and remediate ICT risks
You prepare and deliver consolidated ICT risk reports for executive leadership, Head Risk, and Management
You support ongoing improvement of ICT governance processes, including risk identification, monitoring, and reporting
You will ensure ICT risk management practices remain robust against evolving threats and emerging technologies
Your profile
Bachelor’s degree in Information Security, Risk Management, Computer Science, or related field
Minimum 3+ years of ICT risk management experience within financial services or FinTech
Strong knowledge of risk frameworks (e.g., ISO 27005, NIST, COBIT) and regulatory requirements (e.g., EBA outsourcing guidelines, DORA, GDPR)
Experience with incident response processes, ICT vendor risk oversight, and ICT governance reporting
Excellent stakeholder management skills with the ability to challenge senior leaders constructively
Fluently Englisch (C1) and good German (B2) skills
Having a professional certification (e.g., CISM, CRISC, CISSP, CISA) is a plus
Familiarity with cloud computing risks, encryption, DevOps environments, and API-driven financial platforms is a plus
Experience in consolidating multi-source ICT risk inputs into executive-level reporting is a plus
Understanding of emerging financial technologies such as blockchain, AI, and digital identity is a plus
Your benefits with us
100% remote work within Germany
/
home office
within Germany
possible
30 days annual leave
Offices with flexible workplaces in Hamburg, Eisenstadt, Warsaw, and Melbourne - all equipped with various drinks & snacks.
Our
exclusive gym , next to the Hamburg office, for free use incl.
personal coach
for training and nutrition, available to all employees worldwide
Our unique
CashBack Sport program "Move Republic" , which rewards your daily and sporting activities throughout (Germany)
An
above average pension grant for your company pension scheme
("bAV") in Germany or Austria
Access to Udemy Business – grow your skills with thousands of high-quality online courses
Access to the
employee benefits portal
with the best shopping deals in Germany and Austria
Subsidy
for the
"Deutschlandticket"
(local transport subscription)
Direct communication
channels through the whole company, an open feedback culture and
pronounced appreciation , motivated teams and leads who interact at eye level
#J-18808-Ljbffr