Senior Manager, Information Security & Resilience Risk (ICT Risk)
About us
At Western Union, we're more than a trusted name in global payments. We’re moving beyond remittances, beyond cash, and beyond the expectations of our customers.
Our talented teams enable us to transform into a digital-first company, built on the strength of our retail foundation and powered by next-generation payments. All this with the goal of helping people prosper.
Our customers inspire us to push boundaries and create services that make life easier and communities stronger. Wherever you are in the world, we’re committed to shaping the next generation of financial experiences.
Join us as we go beyond and be part of a team that’s redefining what’s possible.
Key Responsibilities:
As a Senior Manager in Information Security & Resilience Risk, your responsibilities will include:
-
Owning and leading DORA implementation efforts, including assessment of current gaps, process redesign, and rollout of compliant controls.
-
Serving as the formal representative to the Austrian Financial Market Authority (FMA) for cybersecurity and resilience matters.
-
Ensuring compliance with a range of European cybersecurity regulations (DORA, PSD2, GDPR) and frameworks (ISO 27001, NIST).
-
Strategic leadership and stakeholder management need to coordinate with outsourced technology and cybersecurity vendors to monitor performance, risk controls, and incident escalation.
-
Conducting COBIT-aligned IT audits, identify control gaps, and design remediation strategies.
-
Influencing and advising senior stakeholders, including presenting cybersecurity risks, resilience posture and emerging risks to the executive team and board.
-
Coordinating reporting, documentation, and evidence management for all regulatory and audit requirements.
-
Actively participating in operational risk and IT governance meetings as the key subject matter expert.
Role Requirements:
-
Proven experience in a senior IT security or risk management role (preferably in financial or professional services).
-
Minimum of 5 years of hands-on experience in IT Security, IT Risk Management, or IT Audit.
-
A university degree or relevant professional qualifications.
-
Demonstrated experience managing outsourced IT/cybersecurity services (including SLAs, KPIs, and third-party risk).
-
Practical experience with COBIT control frameworks.
-
Strong understanding of DORA and proven involvement in compliance programs.
-
Recognized industry certifications (e.g., CISM, CISSP, CRISC).
-
Comprehensive knowledge of EU ICT risk and cybersecurity regulations (ISO 27001, NIST, PSD2, DORA).
-
Strong analytical and structured thinking skills.
-
Establish and maintain strong stakeholder relationships
Benefits
Salary
We are under legal obligation to indicate the minimum salary, which is EUR 80.250,00 gross per year for this position. However, our attractive compensation packages follow current market salaries and can therefore be significantly above the indicated minimum salary.
Benefits
You will also have access to short-term incentives, multiple health insurance options, accident and life insurance, and access to best-in-class development platforms, to name a few
(https://careers.westernunion.com/global-benefits/). Please see the location-specific benefits below and note that your Recruiter may share additional role-specific benefits during your interview process or in an offer of employment.
Your Austria specific benefits include:
-
Comprehensive life & medical cover
-
Contributory pension plan
-
Luncheon vouchers
-
Other partner discounts
Western Union values in-person collaboration, learning, and ideation whenever possible. We believe this creates value through common ways of working and supports the execution of enterprise objectives which will ultimately help us achieve our strategic goals. By connecting face-to-face, we are better able to learn from our peers, problem-solve together, and innovate.
Our Hybrid Work Model categorizes each role into one of three categories. Western Union has determined the category of this role to be Hybrid. This is defined as a flexible working arrangement that enables employees to divide their time between working from home and working from an office location. The expectation is to work from the office a minimum of three days a week.
Join us:
If you are passionate about being part of a global team that empowers customers through financial services, then we invite you to explore a career with us!