IT Risk & Controls Manager [UK based]

Compre Group; London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A global reinsurance company is seeking an IT Risk & Controls Manager to lead the development of IT and cyber security controls. This hybrid role involves collaboration with stakeholders to enhance security initiatives while ensuring compliance with regulatory requirements. The ideal candidate will have experience in IT Risk Management and cybersecurity frameworks, contributing to a company-wide security strategy.

Benefits

Health & wellbeing subsidy (£20 per month)

Generous pension

Private healthcare

Life assurance

Income protection

25 days annual leave

Cycle to work scheme

Season ticket loan

Electric vehicle scheme

Employee Assistance Programme

Qualifications

• Experience in IT Risk Management, Compliance, or Audit roles.
• Knowledge of DORA framework and IT security standards.
• Experience with security certification processes like ISO27001.

Responsibilities

• Collaborate with stakeholders to drive security initiatives.
• Implement a best practice IT Controls Framework.
• Manage cybersecurity risks and response to incidents.

Skills

IT Risk Management

Compliance

Cybersecurity

Communication

Tools

Microsoft Office

Job description

IT Risk & Controls Manager [UK based]

Department: Data & Technology

Employment Type: Permanent - Full Time

Location: UK (London)

Description

IT Risk & Controls Manager

London or Malta

Hybrid, two days in office

Permanent / full-time

We are a fast-growing global reinsurance speciality company servicing the insurance markets of Lloyd’s, Europe and North America.

Due to expansion and further regulatory obligations, we are looking for our first IT Risk & Controls Manager to lead, develop and implement our IT and cyber security controls framework within a cloud-based insurance environment.

Reporting to the Head of Enterprise Transformation in our Data & Technology team, this is a brand-new position and will span the whole Compre group.

An ideal opportunity to get your hands round a company-wide security strategy, you’ll also be able to influence a major project to modernise our whole IT/cloud estate.

Responsibilities

• Collaborate with stakeholders to drive security initiatives and strategy
• Implement a best practice IT Controls Framework
• Act as the security SME across IT, overseeing security operations, incident management and threat detection
• Ensure robust third-party security, including commercial agreements
• Implement security policies and standards
• Manage cybersecurity risks and response to incidents
• Implement plans to meet cybersecurity regulatory requirements eg. DORA
• Lead the execution of security certifications
• Champion a security awareness culture through training and engagement initiatives
• Work with auditors to demonstrate control compliance and for remediation activities

Candidate requirements

• Experience in IT Risk Management, Compliance, Internal Audit or External Audit roles – understanding IT security standards and frameworks
• Previous work experience in a regulated Financial Services environment – ideally you will have knowledge of the DORA framework and know how to translate requirements into business deliverables
• Track record of implementing and managing IT and cybersecurity control frameworks
• Experience with security certification processes (ISO27001, NIST, etc.)
• Demonstrated success in remediation of audit findings and control gaps
• History of leading security awareness programs and training initiatives
• Experience working with external auditors
• Familiarity with cloud environments and associated security considerations
• Able to communicate complex ideas to non-technical audiences
• Strong Microsoft Office skills, particularly Excel and ideally Microsoft Purview
• Contributing positively to our culture and values.

Benefits

Compre is a global speciality reinsurance company that offers capital and liability solutions to its clients, providing them with the certainty they need on their portfolios. We are known for being trusted partners to the market and for having a team of experts who collaborate and maintain discipline in underwriting, ensuring a differentiated client experience.

As an ambitious business, we are focused on building depth, breadth, and diversity in the talent across our business to be future-ready. Our clients' needs evolve as the market changes, which is why we continuously invest in areas such as data and technology. This way, we can serve current and future clients' needs with scalable and new technology, delivered by our growing agile Data and Technology team.

• Our values are what make us stand out. We value each other, empower and hold ourselves accountable, are authentic, collaborative and inclusive, and continuously strive for progress and innovation.

Why join us?

At Compre, we offer a range of benefits and team engagement events and provide a supportive environment for learning and growth. We are intent upon building a great business, and over the last few years, we have expanded our markets across Europe, Lloyd's, and North America. Our team is based in Bermuda, Finland, Germany, Malta, UK and the US.

To keep our globally dispersed team connected, we have various employee resource groups, including Wellbeing, DEI, COMMS and Engagement.

We invest in our people and offer learning and development opportunities for leaders and employees to build confidence and grow their skill sets. We value teamwork, authenticity, and innovation, and provide a space for these behaviours to bloom at Compre.

Make an impact in a collaborative environment with some of the best talent in the industry, while enjoying:

· competitive salary & annual bonus

· a health & wellbeing subsidy (£20 per month) (from Day 1)

· a generous pension (eligible after probationary period)

· private healthcare from BUPA and a Healthcare Cash Plan from Medicash (from Day 1)

· life assurance (from Day 1)

· income protection (from Day 1)

· 25 days annual leave (from Day 1)

· cycle to work scheme (from Day 1)

· season ticket loan (interest free) (eligible after probationary period)

· electric vehicle scheme (eligible after probationary period)

· EAP (Employee Assistance Programme) (from Day 1)

· learning/study support and reimbursement for professional memberships

· hybrid working

· employee socials and recognition programme