Technology Assurance Lead

Reporting to the Technology Assurance Manager, the Technology Assurance Lead will be part of team responsible for technology Assurance across Admiral Insurance and its’ suppliers. The Technology Assurance Team is part of the newly formed Technology Risk Assurance team within IT, created to combine technology and security risk governance and assurance into a single function within IT.

The Assurance Lead will work with the Assurance Manager to develop and embed the assurance approach for technology (including security). They will drive the development and embedding of an effective control framework for Technology and for monitoring its effectiveness and adherence to it, ensuring that technology and security controls are effectively and proportionately monitored and managed across IT.

The role will lead the development and implementation a risk -based assurance plan to effectively monitor key controls, compliance and risk areas.   They will also support the delivery of the next phase of a GRC tool roll out to enable attestation of control operation. Working closely with the IT teams they will ensure that controls are aligned to good practise and are proportionately applied, enabling a more proactive approach to controls monitoring.

Main Duties:

• Providing leadership and subject matter expertise to drive effective technology controls and assurance.
• Developing and maintaining key relationships across the UK insurance business and Admiral Group as appropriate.
• Developing and implementing an effective control framework for technology and implementing mechanisms to monitoring its effectiveness, enabling proactive identification of issues/risks.
• Recommending control improvements/new controls to address known issues/identified gaps.
• Shaping and implementing a risk-based assurance plan to test and effectively monitor controls, compliance, and technology risks.
• Inputting to audit planning and 2Lod Assurance planning processes.
• Developing supplier assurance approach ensuring control, Technology risk position is understood and managed.
• Remaining aware of external good practise approaches to controls and assurance and changing internal requirements.
• Continuous improvement of TRA controls and assurance processes.
• Reporting on controls posture across IT and communication/escalation of IT controls and assurance position/issues to relevant working groups and committees.
• Working closely with internal IT departments to ensure that controls are effectively implemented.
• Ensuring that internal audit and risk assurance plans focus on key areas of concern.
• Coaching and mentoring junior team members.
• Embedding assurance processes/activities across EUI.
• Scoping and conducting assurance reviews.
• Identifying trends/common themes from assurance activity and progressing required actions with key stakeholders.
• Reporting controls and assurance input to key stakeholders and committees.

Key Skills, Qualifications and Experience

Essential:

• Subject Matter expertise – Have a deep knowledge of Technology and / Cyber Security allowing you to be recognised as an expert within the business.
• A minimum of 5 years’ experience in a Risk, Governance, Controls or Audit role preferably leading a team, supported by a strong understanding of IT/Cyber Security.
• Initiative and pro-activity – Take effective and informed decisions using own initiative and based upon a sound understanding of the business issues and challenges of the business.
• Experience of working in a private sector environment.
• Communication – Clear and appropriate communication for employees at all levels with the ability to discuss technical subjects with both technical and non-technical audiences. Ability to articulate and pitch governance advice, often at a technical level, directly to key customer stakeholders.
• Planning and Organising – Develop clear, efficient, and logical approaches to tackle issues and problems in a logical, step-by-step way. Ability to effectively collaborate, and work independently in a fast-growing organisation.
• Customer focus – An understanding of customer priorities and a desire to support their expectations.

Desirable:

• Previous experience of designing/implementing controls/assurance frameworks.
• Experience working within a regulated environment such as the financial services sector.
• Experience of working in an Audit role.
• Hold one or more relevant qualifications, for example CRISC, CISM, CISA, CRMA).
• Knowledge of widely accepted good practice frameworks (e.g., COBIT, ITIL, ISO etc.).

Our Commitment to You

At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.

All qualified applicants will receive equal consideration for employment.

Benefits and Work-Life Balance

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK.

All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.

You can also view some of our other key benefits here.