Head of Technology Risk Assurance

Admiral is fundamentally a digital business that is increasingly leveraging modern technology and engineering practices to allow us to operate as a "Fintech at Scale". 

Admiral now needs to grow its IT Risk and Governance capability, to inform and support the development and innovation of its technological capability, and continued growth.

Scope of Role

This is a senior leadership role that requires the role holder to be a “trusted advisor” for all IT & Security Risk Matters to ensure Admiral have the right technology, people and process, to ensure that risks are identified, understood and appropriately managed.

This role is new for Admiral, and we are looking for a self-starter, who has vision and will own and develop it.

Job Purpose

• Providing 1^st Line of Defence technology and security risk leadership across Admiral EUI for Technology.
• Identifying and assuring key technology risks across all departments, ensuring policies and controls are being implemented and adhered to.
• Monitoring and mitigating key technology risks, driving a risk awareness culture and promoting a risk-sensitive approach to processes, architectures, applications and platforms within Technology.
• The key technology risks currently in scope are as an example Cloud adoption, Machine Learning, Automation, Cyber Security, Technology & Technology Resilience, IT Transformation, Shadow IT and Lifecycle Management
• Monitoring risk by working closely with the business and IT teams and testing key controls established in our policies.
• Mitigating risk by identifying corrective actions and reporting to key stakeholders, including the Technology leadership team and various board committees.

Accountabilities & Responsibilities

• Manage multiple assurance teams, each focusing on different subsets of technology risks.
• Lead governance for Admiral’s key technology risks up to Board level, including reporting to and managing senior stakeholders.
• Collaborate with domain risk experts across Admiral to deliver
• Develop and implement and assurance plan to effectively monitor the technology risks within group or local markets.
• Act as a centre of excellence and best practice in risk management. Evolving risk management towards a more quantitative approach.
• Advise teams and functions on mitigation actions and actively monitor implementation.
• Ensure the way Admiral manages technology risk is fit for purpose so that we achieve the risk tolerance targets as set by the Board.
• Influence the development of policies and controls from an assurance perspective.
• Define required organisational risk management skills/capabilities and influence their development.
• Produce reporting documentation for Technology and Risk and Compliance Committees.
• Embed technology and security risk ownership across the business.
• Manage third party and regulatory responses, questionnaires.
• Ensure appropriate governance and engagement processes are in place for Internal and external Audit.
• Track and manage any audit findings to satisfactory closure.
• Own and validate our adherence to our policy and standards framework, controls must be linked to the risk which they mitigate.

Experience and Skills

Leadership and Industry

• Experience of senior leadership roles in multiple-businesses and firms, demonstrated ability to motivate staff.
• Proven experience of leading a risk, assurance or quality function in a Technology environment, including developing monitoring and controls, consistent processes and quality reporting.
• Proven stakeholder management abilities including senior leadership stakeholders.
• Strong understanding of Technology, and Security risk management
• Experience operating within heavily regulated environments including external regulated consumer products and service offerings
• Excellent communicator with ability to negotiate, influence and explain, particularly to large business teams in person and remotely.
• Experienced leader able to lead calmly through periods of high pressure whilst inspiring people and teams to achieve excellence and grow their skills
• Drive, enthusiasm, and a can-do attitude
• Practical knowledge of the industry and professional standards

Technical/Role Based

• Proven track record of developing and implementing risk and controls frameworks
• Experience of developing and directing a programme of assurance activity
• Experience and awareness of IT governance, standards, and methodologies
• Experience of Quantitative risk methodologies e.g. FAIR
• Experience and awareness of CISO governance frameworks, standards, and controls
• Relevant IT risk qualification/certification e.g. CRISC or equivalent

Location

We are open to discussion around remote working possibilities (UK only)

Our Commitment to You

At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.

All qualified applicants will receive equal consideration for employment.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

You can also view some of our other key benefits here; https://admiraljobs.co.uk/employee-benefits/.

#LI-CC1