Medior Non-Financial Risk Manager

At Ayvens, progress starts with you. Our ambitions to shape the future of sustainable mobility are powered by our talent. Join us, and get better with every move.

What are you going to do?

As our new Information Risk Manager you will be responsible for independently overseeing and strengthening Ayvens’s information risk profile across the Group. You will challenge and advise the business on effective risk identification, assessment and mitigation, ensuring that information risks are properly managed in line with Ayvens’s strategy, risk appetite and regulatory expectations. You will play a key role in safeguarding information assets, preventing financial and reputational damage, and embedding information risk management into daily business activities across an international environment. You will report to the Team Lead NFR Information Risk.

Your Responsibilities

• Risk, Governance and Oversight: Provide independent oversight of Ayvens information risk management processes ensuring the IT risk management framework, its policies and procedures are properly designed and consistently followed. Challenge the first line of defence to ensure that risks are effectively identified, assessed and managed while maintaining objectivity.
• Advisory and Consultation: Serve as a trusted advisor to the Ayvens Group senior management and Ayvens entities, offering expert advice on information risk related matters. Provide guidance in implementing effective risk controls while balancing business objectives with appropriate risk‑management strategies.
• Risk Assessments and Monitoring: Challenge and evaluate the effectiveness of information risk assessments and mitigation plans for strategic entity‑overarching projects. Ensure risk indicators are in place and explode emerging risks for timely intervention, ensuring that risk appetite and thresholds are aligned with strategy.
• Leadership in Building an Information Risk Aware Community: Lead the development of an Ayvens‑wide information risk community by fostering cross‑functional collaboration, building stakeholder relationships, promoting information risk awareness through targeted training and facilitating the sharing of best practices to embed a proactive information risk management culture.

Who are we looking for?

The ideal candidate has strong interpersonal and advisory skills, confident engaging with senior management and stakeholders across multiple countries. You are a seasoned information risk professional with a strong governance mindset, able to challenge risk decisions while supporting the business with pragmatic, value‑adding advice.

Qualifications

• 8+ years of experience in Information Risk Management, preferably within a regulated environment.
• Strong knowledge of information risk governance, risk assessments, control frameworks and risk appetite concepts.
• Proven ability to advise and challenge senior stakeholders on complex information risk topics.
• Experience working in an international, complex organisational context.
• Strong analytical skills to identify vulnerabilities, threats and appropriate controls.
• Experience with Governance, Risk & Compliance (GRC) tools (preferred).
• Professional certifications such as CISSP and/or CISM, or willingness to obtain within 1–2 years.
• Fluent in English (required).

Benefits

Comprehensive rewards and recognition, competitive benefits and rich development opportunities. You will have opportunities for professional growth, rewards and incentives, and ample training and experience on the job.