Robert Straub

CISO - Ict Risk Control Officer @V-Bank AG

Munich, DE

Performance of the function of the ICT Risk Control Officer, with direct reporting to the Executive Management and ongoing advisory support to the Executive Management.Area of Responsibility:> Responsibility for the management and oversight of ICT risks.> Ensuring effective and prudent ICT risk management to strengthen digital resilience.> Monitoring compliance with the ICT risk management framework.> Accountability for transparency regarding breaches of the ICT risk appetite and ICT security policies (similar to the role of the Information Security Officer).> Responsibility for compliance with staff and, where applicable, third-party training and awareness requirements.Key Tasks:> Assessing the risk position regarding cyber risks.> Evaluating resilience and robustness with respect to ICT risks.> Regular reporting to the management body.> Conducting high-level risk controls and deriving measures.> Monitoring the implementation of ICT security measures.> Supporting the development and evaluation of the DOR strategy.> Drafting the ICT risk management policy.> Steering and coordinating ICT risk management processes.> Defining methods and processes for ICT risk assessment and treatment, in coordination with general risk management.> Reporting significant ICT security incidents to BaFin.