Find your next tech and IT Job or contract Risk management

Contexte et Objectif : La refonte des parcours des clients débiteurs est une initiative du plan stratégique de la banque des particuliers et entrepreneurs. Cette initiative est pilotée par le domaine Socle Crédits et Risques. La Mission viendra en renfort des activités CdP Métiers au sein des squads avec comme périmètre d'activités : l'analyse de l'existant et la préparation de la cible, l'élaboration des besoins, des travaux de recette sur les outils livrés. Activités et livrables attendus : - Piloter et suivre les actions Métiers de l'équipe projet - Organiser, préparer les ateliers et prendre en charge les CR - Contribuer à la rédaction d'EDB et des US avec le BA et les experts Métiers - Contribuer aux travaux de recettes fonctionnelle Métier. - Contribuer avec les experts métier à la rédaction des process, des fiches pas à pas et des comm. d'insertion

Objectifs de la mission : Dans un environnement financier en constante évolution, marqué par : L’intensification des cybermenaces (ransomware, attaques sur les chaînes d’approvisionnement, risques liés à l’IA générative), Un cadre réglementaire exigeant (DORA, NIS2, lignes directrices EBA, etc.), nécessitant une conformité rigoureuse et une gouvernance renforcée, La transformation digitale accélérée (cloud, automatisation, modernisation des infrastructures), La Banque souhaite renforcer sa capacité à piloter et gouverner les risques IT liées à l'IA. Notre client recherche un prestataire capable d’apporter un soutien opérationnel et méthodologique à la première ligne de défense pour améliorer la maturité du dispositif et garantir une vision consolidée, cohérente et pilotable des risques IT. La mission qui s’inscrit dans un contexte international, consistera à assurer l’évolution et l’adaptation du cadre de gestion des risques ICT en cohérence avec la gouvernance IA, notamment par : Participation et appui aux ateliers dédiés à l’IA, Analyse et adaptation des documents cadres proposés par le Groupe, Pilotage et synthèse des travaux IT associés, couvrant : Les inventaires (actifs, processus, données), La gestion de projets (plans d’action, priorisation), Le déploiement des exigences cyber (contrôles, normes, conformité).

ontexte Dans le cadre du renforcement de son dispositif de cybersécurité, notre client recherche un Référent Sécurité IT / Security & Risk Manager spécialisé en gestion des vulnérabilités et gouvernance de la sécurité informatique . Vous interviendrez au sein d'une équipe transverse en charge du pilotage de la sécurité IT, de la coordination des actions de remédiation des vulnérabilités et de l'accompagnement des équipes opérationnelles dans un environnement international. Vos missions En tant que Référent Sécurité IT, vous serez notamment en charge de : Gouvernance de la sécurité Préparer et animer les comités de sécurité et de gestion des risques. Élaborer et suivre les indicateurs de performance (KPI). Produire les reportings destinés au management. Participer aux différentes instances de gouvernance sécurité. Contribuer à l'amélioration continue des processus de sécurité. Gestion des vulnérabilités Piloter le suivi des vulnérabilités et coordonner leur remédiation avec les équipes techniques. Prioriser les actions de réduction des risques. Assurer le suivi des plans de remédiation. Accompagner les équipes dans l'application des bonnes pratiques de cybersécurité. Sensibiliser les collaborateurs aux enjeux de sécurité informatique. Pilotage des projets sécurité Participer aux projets transverses liés à la cybersécurité. Contribuer au cadrage des nouveaux dispositifs de sécurité. Suivre l'avancement des actions et communiquer auprès des différentes parties prenantes. Accompagner les équipes dans la mise en œuvre des exigences de sécurité. Gestion de crise Participer, si nécessaire, aux cellules de gestion de crise cyber. Apporter une expertise sécurité lors des incidents majeurs. Contribuer aux actions de communication et de suivi post-incident.

FIS Integrity -Treasury and Risk Management System 2nd and 3rd Level Support Analyst Our Client is in the process of implementing a global rollout of FIS Integrity Treasury and Risk Management System. You must have at least 1 to 4 years experience of working with and supporting FIS Treasury and Risk Management System Integrity. This is a 2nd to 3 level implementation and support position. The Client may consider experience of FIS Quantum as well. Experience of software development skills with Python, C# .net, C++ and SQL Server would be very useful for this role. Role Description This is a full-time hybrid role for an FIS Integrity System Treasury and Risk Management System Support Analyst to be based in London with flexibility. The Client may consider remote working in exceptional situations. The analyst will be responsible for providing technical support, troubleshooting issues related to the Treasury and Risk Management system (Integrity), and ensuring system stability. Daily tasks include resolving technical queries, conducting system analysis, offering guidance to users, and proactively identifying process improvements to optimize workflows. Ideally have been involved in end-to-end implementation and enhancement of FIS Integrity for banking and treasury clients globally. Lead requirements analysis and translated complex treasury and capital markets processes into functional system designs. Research and document client needs processes relating to system design or enhancements. Facilitate client workshops and training, supporting successful go-lives and post-implementation adoption. Build and support system integrations with third-party platforms including SAP, Bloomberg, Reuters, FXALL, 360T…etc. Configuration of payment processes such as Swift Develop and execute test plans and UAT, performing manual financial validations to ensure accuracy and compliance. Design custom data sources and reports beyond standard product offerings to meet client regulatory and operational needs. You will ideally have experience of ATS training. Qualifications Proficiency in Technical Support, Troubleshooting, and resolving system issues Strong background in Information Technology and Operating Systems Exceptional Analytical Skills to interpret data and identify solutions Effective communication and problem-solving abilities A bachelor's degree in a related field such as IT, Computer Science, or Engineering Experience with FIS Integrity or similar Treasury and Risk Management systems is highly desirable A proactive attitude and ability to adapt to a hybrid work environment This will be a hybrid role with 3 days in the office in Central London. The salary for this role will be in the range £60K - £90K. Do send your CV to us in Word format along with your salary and availability.

FIS Integrity -Treasury and Risk Management System Support Analyst Our Client is in the process of implementing a global rollout of FIS Integrity Treasury and Risk Management System. You must have at least 1 to 4 years experience of working with and supporting FIS Treasury and Risk Management System Integrity. This is a 1 to 3 level implementation and support position. The Client may consider experience of FIS Quantum as well. Experience of software development skills with Python, C# .net, C++ and SQL Server would be very useful for this role. Role Description This is a full-time hybrid role for an FIS Integrity System Treasury and Risk Management System Support Analyst to be based in London with flexibility. The Client may consider remote working in exceptional situations. The analyst will be responsible for providing technical support, troubleshooting issues related to the Treasury and Risk Management system (Integrity), and ensuring system stability. Daily tasks include resolving technical queries, conducting system analysis, offering guidance to users, and proactively identifying process improvements to optimize workflows. Ideally have been involved in end-to-end implementation and enhancement of FIS Integrity for banking and treasury clients globally. Lead requirements analysis and translated complex treasury and capital markets processes into functional system designs. Research and document client needs processes relating to system design or enhancements. Facilitate client workshops and training, supporting successful go-lives and post-implementation adoption. Build and support system integrations with third-party platforms including SAP, Bloomberg, Reuters, FXALL, 360T…etc. Configuration of payment processes such as Swift Develop and execute test plans and UAT, performing manual financial validations to ensure accuracy and compliance. Design custom data sources and reports beyond standard product offerings to meet client regulatory and operational needs. You will ideally have experience of ATS training. Qualifications Proficiency in Technical Support, Troubleshooting, and resolving system issues Strong background in Information Technology and Operating Systems Exceptional Analytical Skills to interpret data and identify solutions Effective communication and problem-solving abilities A bachelor's degree in a related field such as IT, Computer Science, or Engineering Experience with FIS Integrity or similar Treasury and Risk Management systems is highly desirable A proactive attitude and ability to adapt to a hybrid work environment This will be a hybrid role with 3 days in the office in Central London. The salary for this role will be in the range £55K - £65K. Do send your CV to us in Word format along with your salary and availability.

Contexte Dans un environnement financier en constante évolution, marqué par : L’intensification des cybermenaces (ransomware, attaques sur les chaînes d’approvisionnement, risques liés à l’IA générative), Un cadre réglementaire exigeant (DORA, NIS2, lignes directrices EBA, etc.), nécessitant une conformité rigoureuse et une gouvernance renforcée, La transformation digitale accélérée (cloud, automatisation, modernisation des infrastructures), une grande institution financière souhaite renforcer sa capacité à piloter et gouverner les risques IT liés à l'IA. Le pôle recherche un prestataire capable d’apporter un soutien opérationnel et méthodologique à la première ligne de défense pour améliorer la maturité du dispositif et garantir une vision consolidée, cohérente et pilotable des risques IT. La mission s’inscrit dans un contexte international.

Contexte Dans un environnement financier en constante évolution, marqué par : L’intensification des cybermenaces (ransomware, attaques sur les chaînes d’approvisionnement, risques liés à l’IA générative), Un cadre réglementaire exigeant (DORA, NIS2, lignes directrices EBA, etc.), nécessitant une conformité rigoureuse et une gouvernance renforcée, La transformation digitale accélérée (cloud, automatisation, modernisation des infrastructures), une grande institution financière souhaite renforcer son équipe IT Risk ets en charge de vérifier la qualité du dispositif de contrôle des risques de CIB IT & Operations et le respect des exigences réglementaires. La mission s’inscrit dans un contexte international. Missions Contrôle de la qualité de la gestion du risque opérationnel pour les activités gérées par CIB IT & Operations Analyse des processus ICT se référant aux lois, règlements, politiques, procédures et pratiques actuelles Analyse de la conception, l'efficacité opérationnelle et la durabilité des contrôles Contribution à la rédaction d’un rapport à l’issue de revue, incluant des propositions concrètes de remédiation

Head of IT Infrastructure and Security In summary we are looking to recruit an all-round individual with expert knowledge and hands-on experience of IT Infrastructure coupled with Security, Compliance & Risk Management You must have upwards of 10 years hands-on expertise in IT Infrastructure combined with Security and Risk – ideally from within the banking or insurance sector. The Head of IT Infrastructure and Security Lead is responsible for overseeing the organisation’s IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. Some of the key points to consider for this role are: Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology: Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Summary: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. The role will involve managing a Cloud environment in a team of 4 Technical people. Managing 6 different suppliers which include Security, IT Networks, Hosting and Servers and 3 party software. The aim of the role is to bring the MSP’s (suppliers of hardware and software) to the same page for the stakeholders and the Board and ensure technology is running smoothly. The Client is a financial organisation based in the City of London. This is a hybrid position with 3 days in the office. Must have a Bachelor’s degree in IT or similar. The salary for this role will be in the range £85K - £95K plus Excellent Benefits. Do send your CV to us in Word format along with your salary and notice period.

Dans le cadre du renforcement de la gouvernance cybersécurité, nous recherchons un Chef de Projet / Coordinateur Fournisseurs pour piloter les relations avec les fournisseurs stratégiques et assurer le suivi des exigences de sécurité. Missions Coordonner les fournisseurs stratégiques (Cisco, Ericsson, Huawei, etc.). Assurer le suivi des prestations et animer les comités de pilotage. Évaluer la maturité cybersécurité des fournisseurs et suivre les plans de remédiation. Participer à la gestion des risques liés aux tiers (Third-Party Risk Management). Gérer les référentiels et les exigences de sécurité. Accompagner les équipes métiers dans l'évaluation des risques et des besoins. Élaborer les tableaux de bord, KPI/KRI et les supports de présentation (PowerPoint). Assurer un reporting régulier auprès du management. Compétences Fonctionnelles Gestion de projet. Coordination de fournisseurs. Gouvernance cybersécurité (GRC). Gestion des risques. Animation de comités. Reporting et communication. Techniques Connaissance des référentiels ISO 27001, ISO 27005, NIS2 ou NIST. Maîtrise des outils Microsoft Office (PowerPoint, Excel, Teams). Une expérience avec des outils GRC (ServiceNow, Archer, OneTrust...) est un plus.

IT Operations Platforms and Security Lead In summary the Client is looking to recruit an all-round individual with expert knowledge and hands-on experience of IT Infrastructure coupled with Security, Compliance & Risk Management You must have upwards of 10 years hands-on expertise in IT Infrastructure combined with Security and Risk – ideally from within the banking or insurance sector. The IT Operational Platform and Security Lead is responsible for overseeing the organisation’s IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. While Microsoft technologies (Microsoft 365, Azure, Exchange Online) form a core part of the infrastructure, the role also encompasses broader enterprise IT systems, multi layered networking, security, data management, and third-party platforms that support global business operations and the associated applications estate. The role requires a proactive leader who can drive IT operational excellence, manage security risks, focus on continual service improvement, drive transformational delivery projects, and work effectively with internal stakeholders and third-party vendors to deliver a high-quality Global IT services. Working in line with the Architecture defined IT principle of a "buy before build" environment, the individual will need to ensure that outsourced and cloud-based services are robust, cost-effective, and aligned with business needs and the Strategic IT vision. They will also play a key role in enhancing cybersecurity, protecting data and systems, driving transformative operational change, enhancing IT processes and ensuring compliance with governance bodies and industry regulations. Due to the nature of the role, complexity of the estate, current transformation activities and team size, the role requires the functional capability and proficiency to technically augment the team capabilities (when required) and have a detailed knowledge of technical IT support roles/services as a requirement, across multiple technical areas. Security, Compliance & Risk Management Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Conduct regular security risk assessments, penetration tests, and vulnerability management across cloud services. Oversee endpoint security, cloud network and API security for robust protection across all assets Define, manage and maintain accurate DR and BCP plans for the infrastructure area with biannual tests. Technical Experience Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, Microsoft AD (Entra), Server and SQL experience, O365 administration and design Global Software Patching and estate management via Intune Firewall (Azure, CheckPoint and Cloudflare), DNS, VPN, WIFI and Local Area Network design & administration experience Software Defined Networking (Cisco, Meraki, Versa) Key Skills Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Identity & Access Management (IAM): Expertise in Azure AD, MFA, Conditional Access, Single Sign-On (SSO), and Privileged Access Management (PAM). Threat Management & Incident Response: Ability to detect, respond to, and mitigate cyber threats using SIEM, endpoint security, and vulnerability management tools. Networking & Infrastructure Security: Understanding of firewalls, VPNs, SD-WAN, DNS security, endpoint protection, and cloud security controls. IT Service Management & Automation: Experience implementing ITIL-based service management, automating operational tasks, and optimising service delivery. Operational & Leadership Skills: IT Operations & Service Continuity: Ability to ensure IT systems are highly available, resilient, and fit for purpose, with a strong focus on business continuity and disaster recovery. Supplier & Vendor Management: Experience managing third-party IT vendors, MSPs, and SaaS providers, ensuring service levels, performance, and cost-effectiveness. Project Leadership & Change Management: Ability to lead technology projects, system upgrades, and platform migrations, ensuring smooth execution and minimal business disruption. Process Improvement & Automation: Strong analytical mindset to identify inefficiencies, automate workflows, and enhance security controls. Skills & Mindset: Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. Resilience & Adaptability: Comfortable working in an evolving technology landscape, with a proactive and security-first approach. The Client is a financial organisation based in the City of London. This is a hybrid position with 3 days in the office. Must have a Bachelor’s degree in IT or similar. The salary for this role will be in the range £85K - £95K plus Benefits. Do send your CV to us in Word format along with your salary and notice period.

Global Resilience Risk Specialist Technology Risk Lead Global Operational and Resilience Risk (ORR) is a sub function of Group Risk. Its purpose is to make sure the bank understands, and is in control of its non-financial risk position. In addition, the function provides resilience risk stewardship to global businesses, functions and entities we operate in. This is achieved through: Completing analytical assessments and opining on the control environment of the First Line of Defence (1LOD) within Businesses Constructive challenge to the global businesses and functions on their control environment and assessment of risk Oversight of emerging risks, strategic business initiatives and local change activity and new/materially changed products Analysis of risk exposure across all bank operations and territories to inform capital management and stress testing requirements Completing thematic reviews and aggregated reporting of the Non-Financial Risk profile of the bank Responsibility for the implementation of a Risk Management Framework (RMF) that sets out governance, policies and practices to proactively identify, assess, measure and report on, mitigate and control operational risk exposures associated with the businesses and operations at all levels of the organization. The role holder will maintain close working relationships with the wider ORR team, locally, globally and globally Key Accountabilities: The role holder will have global responsibility for: Leading the deployment of deep subject matter expertise around technology risk globally Providing issues, event and incident oversight, including specialist oversight of technical controls globally Supporting country and global ORR Managers with all technology risk related queries Providing advice, guidance and challenge to senior businesses, functions and entity management, ensuring robust opinion is provided through global governance Recommending risk appetite thresholds for technology risk, and oversee risk appetite monitoring Providing guidance and support with policy writing, owning and monitoring compliance with a comprehensive set of clear and concise policies that outline the key principles and minimum requirements applicable to the management of technology risk Engaging with risk owners, control owners and risk stewards to ensure technology risks are managed in accordance to policy Overseeing compliance, for example, through the Risk and Control Assessment process, Top Risk Assessments and Incident Management process Promoting and developing technology risk awareness and risk management culture in order to ensure that the material risks are both evident and effectively managed Identifying any concerning trends and challenging the business to address these Leading on defining the risk and control library, including minimum control standards, with input from Risk Owners, Business Service and Control Owners, specifying key risks and key controls Recommending RCA scoping for technology risk controls and challenge where this is not appropriately applied in the RCA Driving appropriate governance for technology risk across key stakeholders and senior control owners Reporting on risk and control profile, including impacts of external environment changes, emerging risks and changes to the business strategy Monitoring the local external environment to get early sight of emerging risks and provide detailed guidance on controls required to mitigate against them Providing technical guidance to support development and completion of ORR and regulatory reporting obligations (e.g. RAS, top & emerging risks, risk profile reporting, RMM, Board reporting where relevant, etc.) Ensuring any concerns with key controls and material change programmes, relevant to technology risk, are understood and escalated as required Leading regulator and audit engagement pertaining to technology risk; ensure regulatory compliance for technology risk and timely completion of audit actions and findings Support training and capability uplift across ORR to ensure robust understanding of Technology risk. Requirements: Strong leader with the ability to influence at the senior levels of the organisation Expert level of technology risk management knowledge and relevant deep experience in this field Comprehensive knowledge of the internal control environment Ability to communicate effectively, building strong relationships and influence senior internal and external stakeholders Comprehensive knowledge of the external environment (threat, regulatory, geopolitical, competitor, technological landscapes) A change agent who challenges the status quo constructively and positively, leading relevant strategies that enable safe growth of the bank An advanced degree preferable in relevant discipline (e.g. Masters, Doctorate etc.) Location: Kraków The Client will consider candidates from France, Germany UK etc… to work remotely whilst we are in a Pandemic and probably 2 days a week in Krakow after that point. Salary will be in the range of Euros 75K – Euros 95K. Do send your CV to us in Word format along with your monthly salary either in Euros or PLZ.