Information Security and Resilience Risk Manager– Vienna, Austria

Information Security and Resilience Risk Manager– Vienna, Austria

Are you ready to take ownership of a high-impact cybersecurity and risk function in a global financial institution? Do you want to lead the oversight of DORA (Digital Operational Resilience Act) execution while influencing senior leadership and regulatory bodies? Join Western Union as an Information Security and Resilience Risk Manager and be the trusted expert guiding our European operations through today’s complex technology risk and cybersecurity landscape.

Western Union powers your pursuit.

In this high-impact, standalone role, you will take full ownership of establishing and overseeing a robust information security and resilience framework in alignment with European regulatory requirements (including PSD2, EBA Guidelines and DORA) and industry best practices such as ISO 27001, NIST and ITIL. You will be the driving force behind Western Union’s DORA readiness and implementation, acting as the key liaison with regulators while collaborating cross-functionally with global stakeholders across IT, Risk, Legal, and Compliance to ensure enterprise-wide alignment and execution.

Role Responsibilities

Own and lead DORA implementation efforts, including assessment of current gaps, process redesign, and rollout of compliant controls.

Serve as the formal representative to the Austrian Financial Market Authority (FMA) for cybersecurity and resilience matters.

Ensure compliance with a range of European cybersecurity regulations (DORA, PSD2, GDPR) and frameworks (ISO 27001, NIST).

Coordinate with outsourced technology and cybersecurity vendors to monitor performance, risk controls, and incident escalation.

Conduct COBIT-aligned IT audits, identify control gaps, and design remediation strategies.

Influence and advise senior stakeholders, including presenting cybersecurity risks and resilience posture to the executive team and board.

Coordinate reporting, documentation, and evidence management for all regulatory and audit requirements.

Actively participate in operational risk and IT governance meetings as the key subject matter expert.

Role Requirements :

Proven experience in a senior IT security or risk management role, ideally within — ideally financial or professional services (big4 – preferably.

Minimum of 5 years of hands-on experience in IT Security, IT Risk Management, or IT Audit within banking, financial services, or consulting environments.

Demonstrated experience managing and overseeing outsourced IT or cybersecurity services, including SLAs, KPIs, and third-party risk controls.

Practical experience in designing, implementing, and auditing COBIT control frameworks.

Strong understanding of DORA (Digital Operational Resilience Act), with proven involvement in DORA compliance programs or readiness initiatives.

Adept at navigating cross-functional, multicultural, multinational, and matrixed organizations.

Experience preparing and delivering board-level presentations and strategic risk updates.

Exposure to digital banking environments is desirable, though not essential.

Recognized industry certifications such as CISM, CISSP, CRISC, or equivalent.

Comprehensive knowledge of key EU ICT risk and cybersecurity regulations and frameworks, including ISO 27001, NIST, PSD2, and DORA.

Strong analytical and structured thinking, with the ability to interpret complex issues and propose practical solutions.

Calm, confident, and persuasive communicator who can influence without authority.

Persistent and solution-focused problem-solver, capable of driving change in dynamic, high-pressure environments.

Highly collaborative team player, with strong interpersonal skills and the ability to work across organizational boundaries.

Skilled in translating operational detail into strategic insights to support executive-level decision-making.

Fluent in English (mandatory); German language skills are a strong plus.

Salary

We are under legal obligation to indicate the minimum salary, which is EUR 65 000 gross per year for this position. However, our attractive compensation packages follow current market salaries and can therefore be significantly above the indicated minimum salary.

Benefits

You will also have access to short-term incentives, multiple health insurance options, accident and life insurance, and access to best-in-class development platforms, to name a few

Please see the location-specific benefits below and note that your Recruiter may share additional role-specific benefits during your interview process or in an offer of employment.

Your Austria specific benefits include :

Comprehensive life & medical cover

Contributory pension plan

Luncheon vouchers

Other partner discounts

Western Union values in-person collaboration, learning, and ideation whenever possible. We believe this creates value through common ways of working and supports the execution of enterprise objectives which will ultimately help us achieve our strategic goals. By connecting face-to-face, we are better able to learn from our peers, problem-solve together, and innovate.

Our Hybrid Work Model categorizes each role into one of three categories. Western Union has determined the category of this role to be Hybrid. This is defined as a flexible working arrangement that enables employees to divide their time between working from home and working from an office location. The expectation is to work from the office a minimum of three days a week.