Risk Manager - Tech & Cyber Risk in England

Job Title

Risk Manager – Tech & Cyber Risk

Division

General Management – Risk & Compliance

Reports To

Head of Operational Risk

Key Relationships

Risk Management team (including Insurance Risk and Enterprise Risk Management team members), Risk Management Senior Leadership Team, Chief Risk Officer and wider team members of second and third line functions (Compliance and Internal Audit), as well as first line internal stakeholders including Information Security, IT, Data, Procurement, Underwriters and Claims Managers.

Job Summary

Support the Senior Risk Manager – Tech & Cyber Risk and Head of Operational Risk in the oversight and management of technology and cyber risk management activities, as well as wider operational risk matters across the Group.

This is a second‑line of defence role providing risk oversight and challenge across the group, enabling first line teams and relevant risk owners to understand risk exposure and make appropriate risk‑aware decisions.

The role holder is responsible for ensuring clear and timely communication of risk considerations and matters for escalation between first line business teams, the Senior Risk Manager – Operational Risk and the Head of Operational Risk.

Key Responsibilities

• Support the Senior Risk Manager – Tech & Cyber Risk in facilitating regular Risk & Control Self Assessments (RCSAs) with first line risk owners and stakeholders, ensuring the assessments are performed and documented accordingly.
• Support the Senior Risk Manager – Tech & Cyber Risk in implementing and maintaining a robust control environment that is owned and documented by first line business control owners and stakeholders.
• Provide oversight and challenge of the first line process around technology and cyber risk, including areas such as IT and cybersecurity business continuity, IT resilience, digital risk and operational transformation, capital modelling and business planning.
• Produce risk reporting and opinions, including deep dive reviews on hot topics influencing the technology and cyber risk profile to support reporting to internal and external stakeholders.
• Support the Senior Risk Manager and Head of Operational Risk in designing, writing and implementing frameworks, policies, procedures and processes where required.
• Provide critical appraisal of the control environment (including Risk MI) proposed by the business with reference to the agreed risk appetite.
• Liaise with first line business stakeholders and risk owners to capture new risks (including emerging risks) and review controls proposed by first line control owners and stakeholders.
• Assist in the preparation of risk management material for internal and external presentations where necessary.
• Assist in the provision of induction training to all relevant employees.
• Ensure close collaboration with Risk Management colleagues, supporting in the execution of key deliverables and projects as required.
• Keep up‑to‑date on market standards and best practice, as well as regulatory requirements and changes as required.
• Promote a culture of good conduct within the Operational Risk team by demonstrating and communicating the expected levels of behaviour and integrity.
• FCA Conduct Rules – Individual Conduct Rules
• You must act with integrity.
• You must act with due care, skill and diligence.
• You must be open and cooperative with the FCA, PRA and other regulators.
• You must pay due regard to the interests of customers and treat them fairly.
• You must observe proper standards of market conduct.
• Personal Specification

Essential Criteria

• Knowledge and experience of risk management frameworks and tools with proven technology and cyber risk expertise.
• Experience of working in a global and fast‑paced business environment is essential.
• Degree level educated or an equivalent combination of education, training and experience with security frameworks and industry standards; and/or
• Relevant professional qualification (e. g., IRM International Certificate in Operational Risk, Practitioner Certificate in Information Management, etc.).
• Knowledge, Experience and Skills
• Proven technology and cyber risk expertise, preferably with a strong understanding of the Lloyd’s or wider company insurance market and framework.
• Understanding of the commercial drivers and dynamics affecting risk decisions in the insurance sector, as well as operational and risk processes associated with an international insurance group.
• Ability to build strong partnering relationships with a wide range of stakeholders.
• Ability to interact professionally and with credibility and manage expectations of management and key stakeholders.
• Ability to manage time, meet deadlines and prioritise.
• Ability to communicate effectively with others.
• Proficiency in Microsoft 365 apps.
• Experience of Committee and Board reporting.
• Aptitude and Disposition
• Application of risk‑based judgement.
• Influencing and trusted advisor.
• Flexible.
• Energétic, enthusiastic and positive.
• Team player.
• Self‑motivated with the ability to work autonomously.
• Proactive.
• Strong prioritisation skills; ability to meet deadlines and manage stakeholders’ expectations.
• Highest degree of integrity / discretion.
• Strong written and verbal communication skills.
• Analytical.
• Attention to detail, with ability to see bigger picture.
• Ability to challenge, negotiate with, influence and persuade both internal and external parties.
• #J-18808-Ljbffr