Technology and Change Risk Lead Full Time

Vitality
About The RoleTeam – RiskWorking Pattern – Hybrid – 2 days per week in one of our Vitality Offices (Bournemouth, London or Stockport). Full time, 37.5 hours per week. What this role is all about:To support the Group Head of Risk Strategy and CRO in ensuring the successful application of Vitality’s Enterprise Risk Management Framework, and specialist support in regard to managing Technology and Change risks, and the promotion of a positive risk culture across Vitality’s UK Businesses (including Life, Health and Group/Shared services and other activities as they arise) meeting the needs of the business, customers and regulators.To lead the delivery of business partnering and Risk Management practices in Technology and Change risks. Encourage technology and change controls and risk management.Provide ‘2nd Line of Defence’ activity and administration of the various risk reporting processes across Vitality’s UK businesses (Life & Health).Independently assess the systems and controls in place to manage the risk profile. Facilitate the improvement of assurance processes (End User Applications, IT Controls Frameworks, Internal and External Audit guidance) supporting the maturing of risk and control profiles.Key ActionsThe role will be expected to work with and manage stakeholders across the business at all levels including ExCo, Senior Management and ‘Risk Delegates’ as well as promoting good risk management practices across the more junior levels of the organisation through the Risk and Compliance Team.Group Technology and Change Risk management

• Oversee reporting of IT Strategy and Cyber risks, conduct IT Risk Assessments for Business and Technology Services
• Oversee the Information Security Risk management and understand the monitoring of Cloud and Web platforms
• Ensure business is aligned with industry Frameworks such ISO27001/2, NIST and ITIL

ERM Framework, Risk Reporting and Monitoring

• Support embedding of the ERM Framework, with a focus on Technology and Change Risks. Promote and embed best practice in managing risk, and the impact that this will have on business activity and processes
• Oversee ‘1st Line’ business management in the maintaining risk registers and capturing the systems and controls in place to manage risk, including facilitation of risk and control workshops
• Independently assess and challenge the risk and control registers and work with the business to improve their integration and information gathering, allowing the business (in particular the 3rd Line of defence) to disseminate business, risk and compliance activities
• Support monitoring and reporting of Technology and change risk appetites for Vitality, through supporting the development and maintenance of Key Risk Indicators
• Implement and manage process for the company policy framework, ensuring that all policies are reviewed on a biennial basis and attested to on an (at least) annual basis, at minimum
• Oversee risk appetites and develop and maintain Key Risk Indicators
• Oversee and challenge the business on live incident management issues and request full root cause reviews
• Supporting operational resilience testing plans and reporting

Assurance

• Lead and provide ‘2nd Line’ support/challenge/assurance to the relevant areas of business or functional areas of responsibility where required
• These may take the form of general controls review and testing, or ‘deep dives’ of a more technical nature

Essential Skills needed to fulfil this role:

• Experience of working for an insurance company for at least three years in a senior risk role
• Working with front line business units in implementing and enhancing risk management frameworks through risk and control workshops
• A high level of market awareness / understanding of life, health and general insurance practices
• An understanding of risk frameworks, risk reporting and setting of risk appetites
• Experience of leading, motivating, planning, organising and managing teams (or virtual teams) towards delivery of objectives within scope, budget, quality and time
• Technology risk experience, including embedding and challenging technology controls and infosecurity

So, what’s in it for you?

• Bonus Schemes – A bonus that regularly rewards you for your performance
• A pension of up to 12%- We will match your contributions up to 6% of your salary
• Our award-winning Vitality health insurance – With its own set of rewards and benefits
• Life Assurance – Four times annual salary

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page. Fantastic Benefits. Exciting rewards. Great career opportunities!About The CompanyVitality is a multi-award-winning UK insurance brand, here to make the world a healthier, happier place.We’ve been a purpose and values-driven business from day 1- long before it became fashionable. Our core purpose is to make people healthier and enhance protect their lives. Vitality pioneered shared-value insurance. We incentivise people to live healthier longer lives – they benefit, our business benefits, and society benefits. We’re successful because we attract, develop, and retain the best people – and because we care.Plus, you get to join our 1.7+ million members with access to our unique health insurance and healthy living programme. Just to make sure you know our products inside and out. If we are fortunate in receiving a high volume of quality applications we may need to close this vacancy early. If you are interested, please submit your application as soon as possible.