Regulatory Affairs Junior Technician

At RSA our purpose is to help people, businesses, and society prosper in good times and be resilient in bad times. We have offices in Luxembourg, France, Spain, Belgium, and the Netherlands, where we’ve embraced hybrid working and empower our 250 plus people to work flexibly in their country of employment to suit their needs and those of our customers. Our customers benefit from the diverse perspectives of our teams that serve them, solving complex problems with creative ideas. As a proud member of the Intact family, we’re part of something bigger with a presence in North America, the UK, and Europe. We aim to build a specialty solutions leader by capitalizing on a vast market opportunity, while maintaining a sub-90 operating combined ratio. We want you to succeed with us and grow with us – and we’ll give you the tools, flexibility, and learning opportunities you need to do it.

Core Belief

People are at the heart of our organization – and of our success. How we do things is just as important as what we achieve. We are a purpose-driven company based on values and a belief that insurance is about people, not things.

Culture and Community

Our Values guide our decision-making, keep us grounded, help us outperform, and are key to our success. Our values are – Integrity, Respect, Customer-driven, Excellence, and Generosity. We provide an open and honest workplace – where everybody contributes, and every view is listened to and respected.

Social Impact

Our customers are our advocates. Insurance is about people, and helping people be resilient in bad times is the reason we’re here. It’s also why being Customer-driven is one of our Values. Our people are engaged. Our people are central to our success. That’s why we invest in the well-being and development of our employees and create an environment where they can be resilient and thrive. Being a most respected company is about financial outperformance and helping society. Building resilient communities speaks to our purpose and builds on over a decade of investment and leadership.

So, if you are looking to take the next step in your career, work with the best in the business, and open a door of opportunity, contact us today.

Job Description

The Head of Governance and Information Technology RSAL will have the following main areas oversight and control:

• 95% of RSAL’s Technology is supplied by RSA UK and governance of this is via a Managed Service Agreement (MSA) between RSAL and RSA UK overseen and managed by the Head of Governance and IT RSAL.
• Risk identification and impact assessment across all aspects of Information Technology for RSAL.
• Tracking and reporting key risks and their treatment to RSAL Senior Management.
• Supporting group-wide control validation and IT general controls (including Canadian NI 52-109 ITGC compliance) as part of Technology Risk Management.
• Tracking and Horizon scanning of relevant regulatory requirements across the geographies which RSAL operates in.
• Owning and managing the RSAL locally owned systems, applications, and tools.
• Controlling and managing the local IT infrastructure e.g., laptops, desk equipment, and printers.
• Owning and managing compliance and creation of Group and locally owned relevant policies.

Good communication is critical to success and an ability to work with an executive team across geographies is essential. The role will need to articulate pragmatic recommendations for remediation or risk treatment to protect RSA’s systems and/or reduce exposures.

Key Responsibilities

• Ensure the UK CIO through the MSA meets its obligations under that agreement.
• Lead the technology risk management frameworks, methodologies, and control validation activities with a focus on business and customer impacts as they are relevant to RSAL.
• Be a subject matter expert in risk management for Technology, Cyber, and Third-Party risk within RSAL.
• Leading role in ensuring compliance with DORA’s 4 main components; operational resilience, incident reporting, risk management, and third-party risk monitoring.
• Oversee and be able to effectively challenge risks relating to technology to influence senior management decision-making.
• Develop and maintain the annual risk and control monitoring plan for RSAL.
• Reporting to key RSAL governance bodies on IT risk-related matters.
• Lead in-depth risk assessments and control validation activities.
• Monitor IT service level, capacity, availability, continuity, to achieve business requirements within acceptable limits.
• Identification of the most appropriate IT solutions and suppliers.

Skills and Experience

• An advanced experience and background in technology risk, with approximately 10 years of experience in complex organization or IT assurance/consultancy.
• A subject matter expert in risk management and IT controls.
• Strong communicator and influencing skill.
• Understanding of Third Party Risk Management in relation to IT suppliers.