Technological Risk Manager

• University degree in engineering or sciences (computer science, telecommunications, mathematics, etc.), ideally complemented with economic, financial or business training.
• Experience in technology risk management, whether in operational management and execution functions for technology projects, as a risk specialist, or in professional services.
• Experience in managing the software development lifecycle or infrastructure
• Proficiency in office tools (Excel, PowerPoint, Word, Access).
• Fluent English, both reading comprehension and writing.
• Ability to learn and identify key areas of concern, probability of failure and the impact that the operation and use of new technologies such as artificial intelligence, public cloud, predictive analytics, automation and sustainable technology trends may entail.
• Results orientation and autonomy in the development of projects and assigned tasks.
• Generosity in teamwork, ability to foster a collaborative environment.
• Problem-solving and solution proposal (balance between reflection / speed), with a focus on tangible results.
• Communication skills for liaising with other departments and executive reporting.
• Autonomy and proactivity in taking on responsibilities.
• Resilience and ability to adapt to changing and highly critical environments.
• Experience with agile working methodologies.

• Experience in risk management and analysis for projects developed on public cloud will be valued.
• Knowledge of recognized control frameworks and standards (especially ISO 27001) will be valued.
• Professional certifications in the field (e.g., CISA, CISM, ISO 27001, etc.) will be valued.
• Knowledge of banking business processes is desirable, especially products and services for customers through electronic channels

• Be part of the most innovative Bank in Western Europe, according to The Innovators awards from the American magazine Global Finance.
• Onboarding program and personalized support for your professional development.
• Individual training plan with access to our online platform, which offers an extensive catalog of self-learning resources to foster your continuous growth.
• You will have a complete health insurance plan entirely free of charge for you. In addition, you will be enrolled in the Pension Plan, to which CaixaBank will make contributions with your future in mind.
• Flexible compensation applied to transportation, training, languages, childcare, among others.
• Flexibility measures (remote work, flexible entry hours).
• We hold the Top Employer certification, which recognizes us as one of the best companies to work for.

The position is part of the Technology Risk team, whose mission is to ensure the identification, assessment, management, mitigation and monitoring of technology risks at CaixaBank Group, helping to guarantee the availability, resilience and sustainability of information technologies, as well as their alignment with the business's strategic objectives.

The vacancy is available in Madrid or Barcelona and will actively participate in strategic technology transformation initiatives, collaborating with business and technology areas to strengthen the entity's technology risk control and management framework.

The area's activity focuses on key domains such as the availability and continuity of technology services, operations and change management, the evolution of technology architectures, the adoption of cloud solutions, technology governance and the identification of emerging risks.

The main areas of focus include:

• Participation as a risk specialist in strategic digital transformation programs, migration to public cloud and deployment of new technology platforms.
• Assessment and monitoring of risks associated with technology initiatives before, during and after their implementation.
• Analysis of technology risk and risks associated with outsourcing processes.
• Definition and evolution of technology risk control frameworks, policies, procedures and indicators.
• Interpretation and application of regulatory requirements and supervisory expectations regarding technology risk.
• Monitoring of emerging risks arising from technological evolution and the digital environment.

Compliance and Control role responsible for measuring non-financial risk within its area of expertise (technology, information security or resilience), identifying potential control weaknesses and generating relevant information for decision-making in governance and management bodies.

The main responsibilities of the role include:

• Participating in the risk assessment of strategic projects related to cloud, digital transformation and the evolution of technology architectures.
• Identifying risks, vulnerabilities and opportunities for improvement in technology management and operations models.
• Defining, reviewing and updating policies, procedures, controls and indicators associated with technology risk.
• Proposing mitigation measures, action plans and improvements to control models.
• Analyzing the degree of compliance with regulatory requirements and supervisory expectations of the ECB and the Bank of Spain.
• Monitoring the evolution of technology risks and the effectiveness of implemented controls.
• Participating in the preparation of reports addressed to Senior Management, Governance Bodies, Supervisors and Audit.
• Collaborating with the organization's various areas to strengthen comprehensive technology risk management and anticipate emerging risks.

H COBIT (CONTROL OBJECTIVES FOR INFORMATION AND RELATED TECHNOLOGIES)

S.2.2 HUMANISM - LEADERSHIP AND TEAM DEVELOPMENT / SELF-LEADERSHIP

H INTERNAL TOOLS, SYSTEMS, AND COMPLIANCE AND CONTROL PROCESSES