Technology Risk Lead

Reporting to the Technology Risk Manager, the Technology Risk Lead will work as part of a team responsible for coordinating, developing, and operating an enhanced Risk framework for Technology (including security). Working closely with domain and subject matter experts, the team will ensure that Technology risk is effectively monitored and managed across Admiral Insurance.

Playing a vital role in the team, the successful candidate will lead the identification, analysis, and monitoring of Technology and Security risks. They will lead and coordinate risk assessments and provide SME guidance and recommendations for treating security risks. The Lead will work closely with the team manager and key stakeholders to define and implement an enhanced technology and security risk operating model.  

The Lead will also provide the team specialist security risk guidance internally and more widely across the IT function and business as required.

Main Duties

• Security risk leadership and pragmatic guidance/advice.
• Stakeholder advisory & Risk reviews.
• Embedding IT/Cyber risk quantification across IT. 
• Risk reporting to committees.
• Analyse and monitor KRI effectiveness.
• Coach and mentor users in risk identification and assessment.
• Risk analysis & support.
• Horizon scanning for emerging risks & recommendations for action
• Monitoring risk trends and areas of concern and developing mitigation plans with stakeholders.
• Embedding risk-aware culture and risk ownership.
• Oversight of IT/Cyber risk events ensuring risks are appropriately recorded and managed to closure.
• Recommending/reviewing controls to address risks.
• Risk challenge as appropriate.
• Defining/enhancing IT/Cyber Risk processes and embedding them across the business.
• Coaching and mentoring team members.

Key Skills, Qualifications and Experience

Essential:

• Subject Matter Expertise – Have a deep knowledge of Technology and/or Cyber Security, allowing you to be recognised as an expert within the business. 
• At least 5 years experience in an Information/Cyber Security Risk role. 
• Initiative and pro-activity – Take effective and informed decisions using your initiative and based upon a sound understanding of the business issues and challenges. 
• Ability to provide pragmatic, proportionate advice on security risk management.
• Communication – Clear and appropriate communication for employees at all levels with the ability to discuss technical subjects with technical and non-technical audiences. Ability to articulate and pitch governance advice, often at a technical level, directly to key customer stakeholders. 
• Planning and Organising – Develop clear, efficient, and logical approaches to tackle issues and problems logically and step-by-step. 
• Ability to effectively collaborate and work independently in a fast-growing organisation. 
• Customer focus – Understanding customer priorities and a desire to support their expectations. 

Desirable:

• Experience working within a regulated environment such as the financial services sector.
• Hold one or more relevant qualifications, for example, CISM, CISSP, CRISC etc.
• Knowledge of widely accepted good practice security frameworks (e.g., ISO, NIST, SoGP)
• Previous experience using the ServiceNow platform.
• Previous experience in performing risk analysis using the FAIR risk analysis approach. 

Our Commitment to You

At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.

All qualified applicants will receive equal consideration for employment.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.

You can also view some of our other key benefits here.

#LI-NT1