> Markdown version of [/jobs/ext/66363-senior-ict-risk-manager](https://www.wearedevelopers.com/jobs/ext/66363-senior-ict-risk-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # (Senior) ICT Risk Manager - **Company:** Raisin GmbH - **Location:** Berlin, Germany - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Confluence, JIRA, Cyber Security, Databases, Linux, PCI Data Security Standards, Web Applications, Large Language Models, Firewalls (Computer Science), Marisk, Information Technology, Gsuite, Servicenow - **Published:** May 14, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=28ec893c35d08a1e ## About the Role Do you have experience in ServiceNow?, Do you have a Master's degree?, * Bachelor's or Master's degree in Engineering, Computer Science, Business Administration, or a related technical field. * Professional certifications such as CISSP, CISM, or CRISC are a strong plus., * 3-5 years of hands-on experience in information security, ICT risk management, or a closely related field. * Experience working within the banking or financial services industry is highly desirable, with a preference for candidates from a smaller firm or Fintech background for better cultural fit. * Strong knowledge of ICT risk management principles and practices, including risk assessment, mitigation, and monitoring. * Deep knowledge of banking regulations, standards, and frameworks (e.g., NIST, ISO 2700x, MaRisk/BAIT, DORA, GDPR, and/or PCI DSS). * Excellent analytical, problem-solving, and decision-making abilities. * Strong technical understanding of ICT risks, including expertise in securing databases both in transit and at rest. * Familiarity with AI solutions and an understanding of LLM models is a significant plus. * Strong collaboration and communication skills, necessary for advising and coordinating across diverse departments and 2nd Line of Defense units. * Familiarity with tools such as Service Now, G Suite, Web app firewall, Linux, Jira, and Confluence is desirable. ## Description * Drive and maintain the underlying methodology approaches for all ICT risk processes and operations, ensuring process robustness and consistency. * Coordinate ICT risk management across the organization, including designing and operating standardized processes for handling ICT risk cases. * Support the identification, analysis, evaluation, and mitigation of ICT risks, collaborating closely with affected departments. You also coordinate with the 2nd line of defense units on risk treatment strategies and acceptance. * Advise risk owners on effective risk treatment strategies and assist management with related decision-making. * Monitor the implementation status of all defined risk treatment measures and provide necessary oversight. * Provide actionable insights on strengthening controls and mitigating risks in daily operations. * Actively develop and enhance the 1st Line of Defense ICT risk management process in collaboration with 2nd line of defense units. * Prepare management reports detailing the overall ICT risk profile and the progress of risk mitigation efforts. ## Related Videos - [The Missing Layer Between Enterprise Data and AI Agents](https://www.wearedevelopers.com/videos/100286-the-missing-layer-between-enterprise-data-and-ai-agents) - [From AI Assistance to Agentic Systems: Scaling Sovereign AI in Banking](https://www.wearedevelopers.com/videos/100070-from-ai-assistance-to-agentic-systems-scaling-sovereign-ai-in-banking) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) ## Related Articles - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)