My client is a Market Leading Insurer, part of a larger Global Insurance Group, we are looking for a Risk Manager to join the team. This role will cover both Technology Risk and Operational Risk matters within the organization.
Responsibilities:
-Work with stakeholders to implement the Group Information Security frameworks for the Company, including all related policies and guidelines. There will be guidance from Group's Information Security team.
- Conduct gap analysis with Group framework or local regulatory requirements and work with the first line to close the gaps
-Conduct/review security risk assessments and provide guidance to asset owners in terms of protection needs analysis and liaison with IT to ensure that these protections are implemented
-Align topics around business continuity management such as Business Impact Analysis and Business Continuity Plan and assist in the update and review of these documents, including participating or organising and developing as part of the business crisis team in the case of an information security incident
-Assist in the development of BCP tests, exercises and attestations
-Be part of the Risk Management function and work with the Chief Risk Officer on other risk topics as required
Requirements:
3+ years of relevant work experience (Information Security Officer, IT Auditor etc.)
Industry qualifications such as CRISC, CISSP, CISA, COBIT, ITIL would be an advantage
