Overview
Information Security and Resilience Risk Manager – Vienna, Austria. Join to apply for the Information Security and Resilience Risk Manager– Vienna, Austria role at Western Union. Are you ready to take ownership of a high-impact cybersecurity and risk function in a global financial institution? Do you want to lead the oversight of DORA ( Digital Operational Resilience Act) execution while influencing senior leadership and regulatory bodies? Join Western Union as an Information Security and Resilience Risk Manager and be the trusted expert guiding our European operations through today’s complex technology risk and cybersecurity landscape.
Role Responsibilities
* Own and lead DORA implementation efforts, including assessment of current gaps, process redesign, and rollout of compliant controls.
* Serve as the formal representative to the Austrian Financial Market Authority (FMA) for cybersecurity and resilience matters.
* Ensure compliance with a range of European cybersecurity regulations (DORA, PSD2, GDPR) and frameworks (ISO 27001, NIST).
* Coordinate with outsourced technology and cybersecurity vendors to monitor performance, risk controls, and incident escalation.
* Conduct COBIT-aligned IT audits, identify control gaps, and design remediation strategies.
* Influence and advise senior stakeholders, including presenting cybersecurity risks and resilience posture to the executive team and board.
* Coordinate reporting, documentation, and evidence management for all regulatory and audit requirements.
* Actively participate in operational risk and IT governance meetings as the key subject matter expert.
Role Requirements
* Proven experience in a senior IT security or risk management role, ideally within — ideally financial or professional services (big4 – preferably.
* Minimum of 5 years of hands-on experience in IT Security, IT Risk Management, or IT Audit within banking, financial services, or consulting environments.
* Demonstrated experience managing and overseeing outsourced IT or cybersecurity services, including SLAs, KPIs, and third-party risk controls.
* Practical experience in designing, implementing, and auditing COBIT control frameworks.
* Strong understanding of DORA (Digital Operational Resilience Act), with proven involvement in DORA compliance programs or readiness initiatives.
* Adept at navigating cross-functional, multicultural, multinational, and matrixed organizations.
* Experience preparing and delivering board-level presentations and strategic risk updates.
* Exposure to digital banking environments is desirable, though not essential.
* Recognized industry certifications such as CISM, CISSP, CRISC, or equivalent.
* Comprehensive knowledge of key EU ICT risk and cybersecurity regulations and frameworks, including ISO 27001, NIST, PSD2, and DORA.
* Strong analytical and structured thinking, with the ability to interpret complex issues and propose practical solutions.
* Calm, confident, and persuasive communicator who can influence without authority.
* Persistent and solution-focused problem-solver, capable of driving change in dynamic, high-pressure environments.
* Highly collaborative team player, with strong interpersonal skills and the ability to work across organizational boundaries.
* Skilled in translating operational detail into strategic insights to support executive-level decision-making.
* Fluent in English (mandatory); German language skills are a strong plus.
Compensation and Benefits
Salary: We are under legal obligation to indicate the minimum salary, which is EUR 65 000 gross per year for this position. However, our attractive compensation packages follow current market salaries and can therefore be significantly above the indicated minimum salary.
Benefits: You will have access to short-term incentives, multiple health insurance options, accident and life insurance, and access to best-in-class development platforms, to name a few (https://careers.westernunion.com/global-benefits/). Please see the location-specific benefits below and note that your Recruiter may share additional role-specific benefits during your interview process or in an offer of employment.
Your Austria Specific Benefits Include:
* Comprehensive life & medical cover
* Contributory pension plan
* Luncheon vouchers
* Other partner discounts
Hybrid Work Model: The role is categorized as Hybrid, with the expectation to work from the office a minimum of three days a week.
Additional Information
Estimated Job Posting End Date: 11-30-2025. This posting will be updated if the deadline is extended or the role is filled.
#J-18808-Ljbffr