IT Risk & Controls Analyst

Canada Life UK looks after the retirement, investment and protection needs of individuals, families and companies. We help to build better futures for our customers, our intermediaries and our employees by operating as a modern, agile and welcoming organisation. Part of our parent company Great-West Lifeco, Canada Life UK has operated in the United Kingdom since 1903. We have hundreds of respected and supported employees committed to doing the right thing for our customers and colleagues. Canada Life UK is transforming to create a more customer-focused business by providing our customers with expertise on financial and tax planning, offering home finance and annuities propositions, and providing collective fund solutions to third party customers.

The IT Risk & Controls Analyst plays a key part in providing assurance and insight to the management of technology risks, controls and any related governance activities. The role collaborates closely with Engineering teams to ensure that all technology risks are managed effectively and in compliance with standards, providing 1st line risk management expertise. The role also plays a key part in planning and facilitating annual audits (which have an impact on financial reporting), leading activities from a UK IT perspective and working with all parties providing strategic guidance, technical knowledge, quality control and quality assurance for all audit-related activities.

Duties/Responsibilities

• Lead the facilitation of annual audit activities impacting IT, collaborating with key stakeholders, 3rd parties and internal engineering teams to ensure smooth running of all audit activities and timely gathering of evidence.
• Work together with Europe, Central Technology Services (CTS), Identity Access Management (IAM) team to assist in the improvement and operation of the joiners, movers, leavers (JML) process, ensuring it is followed appropriately within the company.
• Provide 1st line risk management knowledge, guidance and support to all IT teams, acting as an SME in that field, helping teams manage technology risk. Collecting and analysing data on control effectiveness and assess the impact on risk posture including: IT Risk Register, Open actions resulting from audits, Open security exceptions, Risk and control effectiveness.
• Act as a point of contact and SME to ensure the Risk Controls Framework is effectively rolled out across all teams, working and collaborating closely with the Engineering teams to develop and implement risk mitigation strategies and controls, and tracking any subsequent action plans.
• Conduct risk analysis to identify potential, or emerging, technology risks and vulnerabilities, gathering and preparing information to the Risk Owner to assist with decision making.
• Responsible for working with key business stakeholders annually to attest to the Information Security Operating Policy.
• Work with European CSIO and Security function to ensure alignment between functions, to ensure policies are adhered to and reported consistently.

Skills, Knowledge and Experience

• 1st Risk Management experience.
• In depth knowledge of Risk Management frameworks and processes including information security and technology risk controls.
• Excellent communication skills, demonstrating a clear and articulate standard of written and verbal communication in a complex environment, tailored for all levels of management.
• Attention to detail.
• Ability to prioritise own workload and act independently.
• Good interpersonal/networking skills, with the ability to maintain a variety of relationships with multiple stakeholders.

Benefits of working at Canada Life

We believe in recognising and rewarding our people, so we offer a competitive salary and benefits package that’s regularly reviewed. As a Canada Life UK colleague, you’ll receive a competitive salary and comprehensive reward package including a generous pension and bonus scheme, along with income protection, private medical insurance and life assurance. We have a fantastic number of other benefits and support services as well as regular personal and professional development.

How we work at Canada Life

Our culture is unique and incredibly important to us. We care about doing the right thing for our people, customers and community and helping others to build better futures. Our blueprint behaviours shape and influence how we work, and are central to the relationships we have with others. Every day we are encouraged to be more curious, own the outcome, face into things together and find a way forward. We want colleagues to have rewarding careers with us so we invest in the development of our people, technology and workplaces. That’s why we offer a range of training, flexible working and opportunities to grow and develop.

Diversity and inclusion

Building an inclusive workplace with a diverse workforce where everyone can feel they belong and achieve their potential regardless of gender, ethnicity or any other characteristic is a key commitment for us. We are proud of the progress we’re making in DEI, and we continue for it to be a significant focus. “At Canada Life we believe in the power of great people from different backgrounds, experiences and perspectives coming together to build better futures. Emerging talent is crucial to our growth and creating an environment that continues to inspire us all.” Nick Harding, Chief People Officer, Canada Life UK.

We appreciate that everyone has different work and life responsibilities. We’re happy to discuss flexible working arrangements, including part time, for any of our roles should this be a requirement for you.