Medior Non-Financial Risk Manager

At Ayvens, progress starts with you. Our ambitions to shape the future of sustainable mobility are powered by our talent. Join us, and get better with every move.

• Risk, Governance and Oversight:
  Provide independent oversight of Ayvens information risk management processes ensuring the IT risk management framework—including its policies and procedures—are properly designed and consistently followed. Challenge the first line of defence to ensure that risks are effectively identified, assessed and managed, while maintaining objectivity and a critical perspective on risk tolerance and mitigation strategies.
• Advisory and Consultation:
  Serve as a trusted advisor to the Ayvens Group senior management and Ayvens entities, offering expert advice on Information Risk related matters. Provide guidance in implementing effective risk controls while balancing Ayvens business objectives with appropriate risk management strategies. Proactively recommend improvements to enhance Ayvens’ overall Information Risk posture.
• Risk Assessments and Monitoring:
  Challenge and evaluate the effectiveness of Information Risk assessments and mitigation plans for strategic entity overarching projects. Ensure that appropriate risk indicators are in place and elevate emerging risks to ensure timely intervention. Ensure that the risk appetite and thresholds are aligned with the Ayvens overall strategy.
• Leadership in building an Information Risk aware community:
  Lead the development of an Ayvens-wide information risk community by fostering cross-functional collaboration, building strong stakeholder relationships, promoting information risk awareness through targeted training and facilitating the sharing of best practices to embed a unified, proactive Information Risk management culture across Ayvens.

• 8+ years of experience in Information Risk Management, preferably within a regulated (banking or financial services) environment.
• Master’s degree in Information Security, Risk Management or a related field (or equivalent).
• Strong knowledge of information risk governance, risk assessments, control frameworks and risk appetite concepts.
• Proven ability to advise and challenge senior stakeholders on complex information risk topics.
• Experience working in an international, complex organizational context.
• Strong analytical skills with the ability to identify vulnerabilities, threats and appropriate controls.
• Experience working with Governance, Risk & Compliance (GRC) tools (preferred).
• Professional certifications such as CISSP and/or CISM, or willingness to obtain within 1–2 years.
• Fluent in English.

• Professional growth, rewards, incentives and training.
• Comprehensive rewards and recognition.
• Competitive benefits and rich development opportunities.
• Healthy, positive work atmosphere.
• Wide variety of benefits supporting mental and physical well‑being.
• Work-life balance.
• Inclusive and authentic workplace culture.
• Focus on sustainability and environmental stewardship.