Associate Vice President - Solution Architect

In this role, you will be responsible for designing, evolving, and operating technology-enabled solutions supporting the group-wide Information and Communication Technology (ICT) Risk Management function and its processes. The role combines solution architecture, risk methodology expertise, data management, and project delivery, acting as a key bridge between risk, cybersecurity, business, and technology teams. You will play an instrumental role in translating regulatory and risk management requirements into scalable, well-governed GRC solutions while ensuring data quality, methodological consistency, and effective change delivery. Your proactive mindset and strong interpersonal skills will be key to building trust and fostering collaboration with stakeholders across business and technology. You will thrive in a friendly, cooperative, and supportive environment that values initiative and teamwork.

Responsibilities:

• Develop and maintain the solution architecture for ICT risk management tools, including the creation of prototypes, business/functional blueprints, and requirements.
• Design, implement, and manage the ICT Risk Management solution in line with industry standards (NIST, ISO 27001 DORA) and streamline the control assessment through enterprise-ready workflows and automation (OSCAL).
• Oversee the data management lifecycle for all data utilized by the ICT Risk Management process, ensuring data consistency, accuracy, and fitness for purpose.
• Lead and manage multi-disciplinary projects (including developers, PMOs, and SMEs) using an AGILE approach.
• Drive change management initiatives by creating and tracking project plans in designated tools.
• Create and maintain comprehensive documentation, including user guides and work instructions, for ICT risk management solutions.

Requirements:

• Master's degree in information technology, business informatics, or a comparable education.
• 8-12 years of experience in GRC/ICT risk management solution architecture and functional design.
• Solid understanding of cybersecurity domains and regulatory frameworks.
• Advanced data management and analysis capabilities.
• Hands-on experience with Jira, Groovy, JSON, GitHub, and risk-related tooling.
• Experience with BI tools such as Power BI and Eazy BI is a plus.
• Strong analytical skills, critical thinking, ability to identify problems, and ability to propose and communicate solutions.
• Autonomous and resilient, with strong planning and organization skills.
• Exceptional communication and stakeholder management skills, both verbal and written in English (German would be considered an asset).

Skills

GRC, ICT risk management, cybersecurity, governance risk compliance, information security, risk management, solution architect, solution architecture