IT Risk Manager

Position Summary

The IT Risk Manager role serves as a best practice/quality contributor supporting the organisations'' IT and Ops Risk Management Programme. The individual will act as first line of defense providing RCG risk assessments and other risk management activities including risk identification, profiling, assessment, response, evaluation and advising on issues and remediations to support the overall IT and Ops organisation. This position supports the risk management activities in alignment with the Risk and Controls Governance framework.

This position requires the applicant to have an intermediate or expert level of understanding of IT and Operational risks and the execution of first line IT risk management processes and governance within a large institution. The applicant must also have good communication and management skills, and strong knowledge of industry best practices.

Key Responsibilities

Performs a combination of the following duties according to departmental guidelines:Strategy and Transformation:• Align with Group RCG target state program based on the planned roadmap including governance, risk management methodologies, technology enablement and automation, metrics, and reporting.• Collaborate with the three lines of defense and other risk functions on behalf IT and Operations to support, enable and align the Risk and Controls Governance strategy within the broader CNA and CNA Hardy risk functions.• Engage stakeholders at all levels across businesses and divisions to ensure effective communication and sufficient stakeholder input and buy-in.• Help develop education, training, and awareness campaign materials regarding IT and Operations risks as well as critical communications to help provide clarity and adoption.

Operational Activities:• Execute Risk and Controls Governance operational activities including:o Risk profiling (inherent risk assessment).o Risk assessments for processes, applications, and infrastructure.o Risk and scenario analysis for IT and Operations risks.o Risk metrics and reporting.o Document and develop materials for leadership to review issues identified through these activities.o Help the business create, direct governance channels, and monitor execution of the risk response plans in alignment with methodology.o Act as the point of contact to assist and respond to questions from key stakeholders and the business; manage required escalations and communication.o Provide IT and Operational guidance and risk advisory support to key initiatives.• Develop materials to provide regular updates to CNA Hardy Executives on the overall health of the functional areas including preparing necessary information to facilitate management discussion and decision making.• May prepare and present training materials using methods appropriate to the audience.• Update management on the progress of owned tasks.• Escalate issues as appropriate.• Perform other duties as directed by the Performance and Governance Director, or CIO and Head of Transformation.• May perform other duties as assigned.

Skills, Knowledge and Abilities

• Proven experience (5+ years desirable) with IT and Operations Governance and risk functions with a focus on identifying, assessing, and mitigating risks within a corporate environment.• Coordinate with support teams to troubleshoot issues and any planned activities. Ability to develop and maintain risk registers, control libraries, and compliance documentation.• Strong analytical skills to assess complex risks and recommend appropriate risk mitigation strategies and controls.• Experience in collaborating with cross-functional teams, including Operations, IT, security, compliance, and business units, to drive risk management initiatives.• Strong interpersonal skills to support stakeholder communication and engagement across departments.• Experience with technology process, risk and control frameworks.• IT Risk and Compliance, Audit, or Quality certifications desirable (e.g. CISSP, CISM, CISA, CIA, CRISC, CGEIT, CIAC, ISO, etc.).• Excellent interpersonal, consultative and communication skills. Ability to interact effectively at all levels with clients, consultants, vendors, peers, and IT management and staff.• At ease presenting to large audiences.

ding a superior suite of insurance solutions that any organisation conducting business requires.

The Company

CNA Hardy is a leading specialist commercial insurance provider for clients within the Lloyd''s and company markets. We offer a highly specialised and comprehensive portfolio of innovative and market leading products. Coverage is available to businesses of all sizes for domestic, international and global ..... full job details .....