ICT & IS Risk Manager – Operational Risk

About the role

The ICT & IS Risk Manager will help build and transition a new ICT & Cyber Risk function within Habib Bank AG Zurich’s Group Operational Risk team. Reporting to the Head of ICT & IS Risk, the role works closely with senior IT, Information Security, Project and Risk stakeholders to ensure robust governance of technology and data risks.

Key responsibilities

• Support the design and rollout of the Group’s ICT & Cyber Risk Framework, including policies, procedures, taxonomies and governance models.
• Develop oversight structures aligned with regulatory expectations (FINMA, OSFI, SBP, HKMA, SARB, UAE CB) and formalise control libraries, KRIs, RCSAs and issue‑tracking mechanisms.
• Independently review and challenge ICT and IS risk assessments, maintain the ICT & Cyber Risk Register and oversee control environments such as user access, change controls, incident response and business continuity.
• Lead 2nd‑line Change Risk Assessments, monitor high‑impact projects, and coordinate post‑implementation reviews to verify risk mitigation.
• Provide oversight of third‑party IT/IS providers, ensuring controls for critical data confidentiality, integrity and availability, and participate in contract and SLA risk reviews.
• Maintain an integrated ICT & Cyber Risk dashboard with KRIs and early‑warning indicators for senior management reporting.

Required profile

• Mid‑level professional with strong knowledge of ICT, information security and operational risk.
• Self‑motivated and able to work independently while influencing senior stakeholders.
• Experience with regulatory frameworks and risk governance in a banking or financial services environment.

Required skills

What we offer

• Opportunity to shape a new risk function within a multinational banking group.
• Exposure to senior leadership and cross‑functional teams.
• Competitive remuneration and professional development support.