Technology Assurance Manager

Reporting to the Head of Technology Risk Assurance, the Technology Assurance Manager will lead a team responsible for technology Assurance across Admiral Insurance and its suppliers. The Technology Assurance Team is part of the newly formed Technology Risk Assurance team within IT, created to combine technology and security risk governance and assurance into a single function within IT.

The Assurance Manager will work with the Head of Technology Risk Assurance to develop and embed the assurance approach for technology (including security). The manager will also be responsible for developing and implementing a centre of excellence for assurance, ensuring that technology and security controls are effectively and proportionately monitored and managed across IT.

The manager will develop and implement a risk-based assurance plan to effectively monitor key controls, compliance and risk areas. They will also define and deliver the next phase of a GRC tool rollout to enable attestation of control operation. Working closely with the IT teams, they will ensure that controls are aligned with good practice and are proportionately applied, allowing a more proactive approach to controls monitoring.

The Manager will also ensure that the controls posture is monitored and that any trends are identified and communicated to key stakeholders as appropriate.

Main Duties:

• Providing leadership and subject matter expertise to drive effective technology controls and assurance.
• Developing and maintaining key relationships across the UK insurance business and Admiral Group as appropriate.
• Managing a team of controls and assurance subject matter experts.
• Developing a centre of excellence for assurance.
• Developing and implementing an effective control framework for technology and implementing mechanisms to monitoring its effectiveness, enabling proactive identification of issues/risks.
• Maximising benefits of GRC tooling to support controls and assurance processes.
• Recommending control improvements/new controls to address known issues/identified gaps.
• Developing and implementing a risk-based assurance plan to test and effectively monitor controls, compliance, and technology risks.
• Inputting to audit planning and 2Lod Assurance planning processes.
• Ensuring appropriate governance of Suppliers’ technology controls and ensuring that status is reported and managed appropriately.
• Remaining aware of external good practice approaches to controls and assurance and changing internal requirements.
• Continuous improvement of TRA controls and assurance processes.
• Reporting on controls posture across IT and communication/escalation of IT controls and assurance position/issues to relevant working groups and committees.
• Working closely with internal IT departments to ensure that controls are effectively implemented.
• Ensuring that internal audit and risk assurance plans to focus on key areas of concern.

Key Skills, Qualifications and Experience

Essential:

• Have a deep knowledge of Technology and/or Cyber Security, allowing you to be recognised as an expert within the business. 
• A minimum of 5 years experience in a Risk, Governance, Controls or Audit role, preferably leading a team, supported by a strong understanding of IT/Cyber Security.
• Take effective and informed decisions using your initiative based on a sound understanding of the business issues and challenges.
• Clear and appropriate communication for employees at all levels with the ability to discuss technical subjects with both technical and non-technical audiences. Ability to articulate and pitch governance advice, often at a technical level, directly to key customer stakeholders.
• Develop clear, efficient, and logical approaches to tackle issues and problems logically and step-by-step. 
• Ability to effectively collaborate and work independently in a fast-growing organisation.
• An understanding of customer priorities and a desire to support their expectations.

Desirable:

• Experience working within a regulated environment such as the financial services sector.
• Hold one or more relevant qualifications, for example, CCRISC, CISM, CISA, CRMA).Knowledge of widely accepted good practice frameworks (e.g., COBIT, ITIL, ISO etc.).
• Previous experience in designing/implementing controls/assurance frameworks.
• Previous experience using the ServiceNow platform.

Our Commitment to You

At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.

All qualified applicants will receive equal consideration for employment.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.

You can also view some of our other key benefits here.

#LI-NT