AddressReporting to the Technology Assurance Manager, the Technology Assurance Senior Analyst will be part of a team responsible for technology Assurance across Admiral Insurance and its’ suppliers. The Technology Assurance Team is part of the newly formed Technology Risk Assurance team within IT, created to combine technology and security risk governance and assurance into a single function within IT.
Playing a key role in the team, the Senior Analyst will support the development and embedding of an effective control framework for Technology and for monitoring its effectiveness and adherence to it, ensuring that technology and security controls are effectively and proportionately monitored and managed across IT.
The role will support the development and implementation a risk -based assurance plan to effectively monitor key controls, compliance and risk areas. They will also support the delivery of the next phase of a GRC tool roll out to enable attestation of control operation. Working closely with the Technology Assurance Lead and IT teams they will ensure that controls are aligned to good practise and are proportionately applied, enabling a more proactive approach to controls monitoring.
Main Duties
- Providing subject matter expertise to drive adequate technology controls and assurance.
- Developing and maintaining key relationships across the UK insurance business and Admiral Group as appropriate.
- Contributing to the development and implementation of a practical control framework for Technology and implementing mechanisms to monitoring its effectiveness, enabling proactive identification of issues/risks.
- Recommending control improvements/new controls to address known issues/identified gaps.
- Contributing to the development and implementation a risk-based assurance plan to test and effectively monitor controls, compliance, and technology risks.
- Inputting to audit planning and 2Lod Assurance planning processes.
- Supporting delivery of a supplier assurance approach ensuring control, Technology risk position is understood and managed.
- Remaining aware of good external practice approaches to controls and assurance and changing internal requirements.
- Reporting on controls posture across IT and communication/escalation of IT controls and assurance position/issues to relevant working groups and committees.
- Working closely with internal IT departments to ensure that controls are effectively implemented.
- Embedding assurance processes/activities across EUI.
- Scoping and conducting assurance reviews.
- Identifying trends/common themes from assurance activity and progressing required actions with key stakeholders.
- Reporting controls and assurance input to key stakeholders and committees.
Experience Required
Essential:
- Subject Matter expertise – Have a good knowledge of Technology and / Cyber Security including systems, processes, and controls.
- A minimum of 3 years’ experience in a Risk, Governance, Controls or Audit role, supported by a strong understanding of IT/Cyber Security.
- Initiative and pro-activity – Take effective and informed decisions using own initiative and based upon a sound understanding of the business issues and challenges of the business.
- Experience of working in a private sector environment.
- Communication – Clear and appropriate communication for employees at all levels with the ability to discuss technical subjects with both technical and non-technical audiences. Ability to articulate and pitch governance advice, often at a technical level, directly to key customer stakeholders.
- Planning and Organising – Develop clear, efficient, and logical approaches to tackle issues and problems in a logical, step-by-step way. Ability to effectively collaborate, and work independently in a fast-growing organisation.
- Customer focus – An understanding of customer priorities and a desire to support their expectations.
Desirable:
- Previous experience of implementing controls/assurance frameworks.
- Experience working within a regulated environment such as the financial services sector.
- Experience of working in an Audit role.
- Hold one or more relevant qualifications, for example CISA, CRISC, CISM, CISA, CRMA).
- Knowledge of widely accepted good practice frameworks (e.g., COBIT, ITIL, ISO etc.).
Salary, Benefits, and Work-Life Balance
We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.
At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to work for in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.
All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.
You can also view some of our other key benefits here.
#LI-KG1
