Filled - 4/9/2023 - Technology Risk Advisor - London, United Kingdom - Willis Towers Watson

Willis Towers Watson

Verified Company

London, United Kingdom

2 weeks ago

Posted by:

Tom O´Connor

beBee Recruiter

Description

Filled - 4/9/202- Technology Risk Advisor

London, GB

June 06, 2023

In addition, the Technology Risk Advisor is responsible for execution of all reporting capabilities related to risk identification, assessment and treatment underpinned by the defined Cyber and Technology Risk and Control Framework.

Excellent specialist knowledge of technology controls is a must for this role.

The role holder will work closely with stakeholders to ensure that details of risks are clearly understood by risk owners as well as remediation owners including expectation about operational effectiveness of relevant controls.

Providing suggestions and recommendations on risk treatment (acceptance, remediation, transfer, closure) to risk owners will be a core remit of this role.

We operate a consultative rather than confrontational approach whilst maintaining the integrity and independence and ensuring effective management of technology risk.

The Technology Risk Advisor role is aligned to our Hybrid workstyle, predominantly based from home with occasional travel to WTW offices as needed.

Whilst you will be based in the UK, the stakeholders are global and thus requires the ability to manage them remotely.

The Role

Working with risk and control owners and other key stakeholders to prepare artifacts required to agree risk identification, assessment, and treatment, including analysis and review of management responses.
Working with wider risk management team to agreed processes and required artifacts.
Ability to execute risk assessments (planned and adhoc) independently as well as part of the team.
Provide insight into technology risk findings and coach others through the development of remediation plans to appropriate risk treatment action plan is agreed.
Provide appropriate challenge to stakeholders across all three lines of defense.
Status reporting and MI for senior stakeholders.
Taking initiatives and contributing to improvement of the technology and cyber risk and controls management activities and framework.
Work with the wider technology and cyber risk management team to ensure correlation of related artifacts and timely follow ups with stakeholders.
Identify opportunities and recommendation to improve the design and implementation of technology controls whilst being driven by defined risk appetite.

The Requirements

Skills:

In depth understanding of risk management frameworks as they pertain to technology as well as information and cyber security.
Experience of working in a cloud environment (Azure beneficial) and knowledge of cloud security controls.
In depth understanding of three lines of defense principles and scope.
Credibility and technical understanding of technology risk and control management practices.
Substantial experience in technology risk management processes supported by governance preferably in a financial institution.
Previous experience in Risk Management role (1st or 2nd LoD) or IT Audit.
Knowledge and understanding of IT general controls and IT concepts.
Whilst this is not a handson technical role, the role holder will be expected to demonstrate a strong awareness of technology and how IT is used to enable business processes with ability to deep dive into technical details when necessary.
Experience in working with common industry used GRC tools.

Qualifications:

Experience in a risk management role.
Experience of working within a Global Financial organisation.

**At WTW, we believe difference makes us stronger. We want our workforce to reflect the different and varied markets we operate in and to build a culture of inclusivity that makes colleagues feel welcome, valued and empowered to bring their whole selves to work every day. We are an equal opportunity employer committed to fostering an inclusive work environment throughout our organisation. We embrace all types of diversity.