Primary Details

IT Risk Analyst

London, Permanent (Hybrid - 1 day in London office)

The Opportunity

We have an amazing opportunity to join our IT Risk function as IT Risk Analyst on a full time, permanent basis. This role will suit someone who has a good understanding of IT risk and control frameworks, IT risk management and reporting.

Your new role

Reporting to the Head of IT Risk and Governance, you'll assist in developing and conducting consistent divisional / functional risk & control assessments. You'll be partnering with Divisional and Global IT teams, Business Operations and Enterprise Risk Management. You'll perform various control testing, risk reporting to ensure compliance with IT controls, undertake risk assessments, gather data, maintain risk and control registers.

Other responsibilities:

• Provide guidance and support to the IT stakeholders in undertaking IT Risk and Control Assessments
• Guide IT stakeholders to ensure that Issue and Incident Management process is followed
• Support the Divisional IT Risk Manager in executing IT Risk and Control Assurance activities and undertaking IT controls testing
• Assist IT Risk Manager in embedding sound IT risk practices across the division
• Support the Divisional IT Risk Manager in maintaining a Divisional view of compliance with the applicable IT policies and standards
• Act as the first line of contact to interface with IT and business stakeholders for IT risk management
• Facilitate the engagement of assurance providers such as GIA and external auditors with the IT stakeholders
• Source and validate the risk and control indicators and measures from the risk and control owners
• Support the Divisional IT Risk Manager in the production of Divisional IT Risk Reporting and Dashboard
• Support the Divisional IT Risk Management in developing a Divisional view of: 
  -    Risk and control self-assessments 
  -    Issues and Incidents (including Internal Loss Events) 
  -    Control testing 
  -    Risk and Control registers 

About You:

• Experience in Technology Risk, Technology Audit, Compliance, or related field
• Experience in a similar role of IT risk management and/or information systems auditing
• Experience or knowledge of frameworks such as NIST, ISO, COBIT
• Experience of providing assurance on risk and controls across multiple technology and cyber operational area
• Ability to manage the risk & control elements of a portfolio of Change, including reporting, support, and troubleshooting
• Report writing and using Microsoft Office tools (e.g. Excel, PowerPoint, Word)
• Risk related Certifications such as CISA, CISSP, CISM, CRISC (desirable)

Why QBE? At My Best?? 

At QBE, we want our people to feel rewarded and inspired to perform at their best, that’s why we have created “At My Best”. It’s our connection, our way of showing we have your back. We understand that one size doesn’t fit all and that priorities can change depending on your life stage. That is why our blend of wellbeing initiatives and benefits offer flexibility to suit what matters most to you. It’s in the culture of our business, our QBE DNA, to support our people. Everything we do is underpinned by our QBE DNA.?? 

We’re an international insurer that’s building momentum towards realising our vision of becoming the most consistent and innovative risk partner. We can never really predict what’s around the corner, but at QBE we’re asking the right questions to enable a more resilient future – helping those around us build strength and embrace change to their advantage.?? 

QBE aims to build a workplace that is fair and inclusive because we want to attract and retain the best people to do the job, we have adopted flexible working across the company and welcome this conversation (https://careers/flex-qbe/).? 

With more than more than 13,000 people working across 27 countries, we’re big enough to make a real impact, but small enough to provide a friendly workplace, where people are down-to-earth, passionate, and kind.?? 

To find out more about why you should work for QBE, visit our careers website.? 

At My Best - QBE Benefits?? 

You are more than your work – and QBE is more than a workplace, which is why we provide you with the benefits, support and flexibility to help you concentrate on living your best life personally and professionally.? FOR UK ONLY: As well as the benefits below we also offer an extensive choice of other options to suit you!?? 

30 days holiday a year with the option to buy up to 2 additional days.? 

Flexible working - balancing work and life is important so our flexible working opportunities are open to all, this can include part-time, job share and compressed hours.? 

Pension – you are automatically enrolled into the QBE pension plan, which entitles you to receive employer contributions of 10% of your basic salary.? 

Private medical insurance – we fund fully comprehensive private medical cover for you and all the family.?? 

Family friendly policies – we offer 26 weeks leave at full pay regardless of gender identity, sexual orientation or how you become a parent.? 

Short term remote work abroad - you can request up to 20 days per year to work remotely from certain locations abroad.? 

Sustainable investing - we believe sustainable integration is important for long term financial, environmental, and social outcomes. Our pension strategy supports our net-zero goal to achieve year-on-year reductions in carbon footprint, by investing more in green businesses than the broader market, so your savings are looking after the planet's future, as well as your own.? 
Cycle-to-Work – benefit from regular exercise whilst making your commute greener and cheaper, select and bike and/or accessories up to the value of £5,000.? 

To find out more visit our? Reward Page? 

QBE Awards?? 

Some of the award’s QBE are proud to have won, been a finalist for, and shortlisted for include;?? 

AXCO Global Insurance Awards 2024 Winner: Network Management of the Year? 

Insurance Business UK 5-Star Cyber Awards 2024: QBE rated as a 5-Star Cyber Insurer? 

UK IT Industry Awards 2023 Winner: Green Technology Innovation of the Year?