IT Risk & Security Manager, Europe

Travelers; London; Hybrid; GBP 40,000 - 80,000; Full time

Job description

Who Are We?

Taking care of our customers, our communities and each other. That’s the Travelers Promise. By honoring this commitment, we have maintained our reputation as one of the best property casualty insurers in the industry for over 160 years. Join us to discover a culture that is rooted in innovation and thrives on collaboration. Imagine loving what you do and where you do it.

Target Openings

1

What Is the Opportunity?

At Travelers, our Risk & Security Officers assess internal and external cyber and technology risks and design, test, and monitor the operational effectiveness of cyber and technology controls at Travelers and key third parties.

This position is responsible for identifying, assessing and establishing mitigation strategies within a business and across the enterprise. Partnering and maintaining strong working relationship with key constituents (i.e.; IT risk management, security, business continuity, enterprise risk management, corporate audit, compliance, business continuity, and information systems security) while driving solutions to reduce risk. This position works with the IT Risk Management core team to develop and maintain metrics, track and monitor ITRM and Corporate Audit Risk issues, execute the ITRM methodology including IT Risk Management profiling and analysis. This job will not manage but may lead others.

Travelers Europe currently offers flexibility to employees who wish to work on a hybrid basis in accordance with our Hybrid Work Arrangements Policy. This entails full time employees working three days a week in the office and two days at home (or pro rata for part-time employees). This policy may be changed at the Company’s discretion.

What Will You Do?

Assist the IT Risk Director in the following:

• Risk Analysis and Risk Assessments:
• Identify and lead the appropriate subject matter experts to participate in the identification and analysis of risk scenarios.
• Direct the completion of risk analysis sessions and risk assessment activity within the Lines of Business (LOB).
• Risk Treatment:
• Support the accountable parties in determining the appropriate treatment of identified risks.
• Identify appropriate action plans for risk remediation.
• Communicate and set direction for the acceptance of risk that is aligned with Travelers risk appetite.
• Control Creation, Optimization and Monitoring:
• Inventory, assess significance, assign accountability, and develop appropriate monitoring for the LOB control environment.
• IT Process, Risk and Control (PRC) Framework:
• Partner with assigned LOB risk managers to ensure alignment and support the LOB in understanding and applying the IT Process, Risk and Control (PRC) framework.
• Align IT Risk Management (ITRM) activity with the IT PRC framework.
• Gain an understanding of how the LOB controls map to the IT PRC framework and gaps in risk and control coverage.
• Metrics & Reporting:
• Direct the LOB to identifying and obtaining the data required for consolidated metrics and reporting.
• Prepare LOB specific reporting dashboards and metrics that are external to the risk management tool.
• Technology Enablement:
• Train the LOB end users to understand the risk management tool and how to leverage its capabilities.
• Identify additional LOB ITRM processes or specific requirements that can be operationalized through the risk management tool.
• Use the risk management tool to support the ITRM activity completed by the LOB.
• IT Risk Management Training:
• Support the education and awareness of LOB personnel across ITRM principles, concepts and methodologies.
• Attend required ITRM training sessions.
• Governance, Policies and Procedures:
• Facilitate the communication, education and awareness of key IT Risk Management initiatives and coordinate feedback to be provided back to IT Risk Management.
• Responsible for compliance with audit planning and tracking, business continuity and records retention.
• Responsible for compliance with the LOB in understanding and applying policies, standards and procedures across the IT environment.
• Responsible for compliance with the LOB in understanding the ITRM taxonomy and ITRM processes.
• Involvement in the IT Risk Management council.
• Other:
• Will be called upon to provide innovative risk management solutions.
• Perform other duties as assigned.

What Will Our Ideal Candidate Have?

• Experience in Risk Management or related fields such as Audit, IT Security, or Business Continuity preferred.
• Bachelors degree in Technology or a related field preferred.
• Experience leading technical teams preferred.
• Technical Knowledge – Advanced
• Technical knowledge to understand detailed issues around business continuity, security, and overall risk in IT.
• Able to have enough expertise to drive a solution and solve issues, addressing risk.
• Business Knowledge & Partnership – Advanced
• Creates an atmosphere where business partner’s issues are dealt with professionally, and in a timely manner. Suggests solutions that make sense and improves performance of assigned systems.
• Ensures customer’s perspective is understood to optimise system(s) support of business goals.
• Communicates openly and effectively in a manner consistent with the audience.
• Recognises the importance of superior quality in providing a competitive edge.
• Ensures that reports are precise, timely and accurate.
• Problem Solving & Decision Making – Advanced
• Demonstrates sound analytical and diagnostic skills dealing with issues that are loosely defined and/or where information is available but must be further manipulated.
• Once decisions are made, is able to follow the management plan and direct activities to obtain results.
• Breaks a problem down to manageable pieces and implements effective, timely solutions.
• Takes input from several sources, decides if all the information needed is available and moves to a decision.
• Confronts conflict until resolved.
• This role requires strong judgment, reasoning and organisational savvy.
• Team Orientation – Advanced
• Maintains effective partnerships across the organisation and is able to influence senior management, peers and subordinates through an inclusive style and recognition of their abilities and knowledge.
• Balances team and individual responsibilities.
• Exhibits objectivity and openness to others’ views.
• Gives and welcomes feedback.
• Puts success of team above own interest.
• Leadership – Intermediate
• Supports a distinct business unit or several smaller functions.
• Responsibilities are assigned with some latitude for setting priorities and decision-making using established policies and procedures.
• Results are reviewed with next level manager for clarification and direction before proceeding.
• This role requires expertise in lobbying, influencing without authority, and cross-enterprise integration.
• Planning and Project Management – Advanced
• Identifies those tasks that are most important and maintains a clear sense of priorities and the larger picture. Anticipates and effectively responds to changes in workload and resources.
• Communications – Advanced
• Strong communications skills are required to work across the organisation, and several corporate functions.
• Financial Awareness – Intermediate
• Ability to frame risk issues in a risk business case / terms, to help prioritise projects and value.
• Human Resource Management – Basic
• Demonstrates good interpersonal skills by displaying an understanding of the needs and perspective of others.
• Able to balance the workload of team members and supervise individuals of varying ability.
• Certified in Risk and Information Systems Control (CRISC) designation preferred.

What is a Must Have?

• Some prior IT Risk Management experience required.

What Is in It for You?

• Private Medical Insurance: On commencement of employment, you are eligible for single cover provided by Travelers, with the option to add cover for your dependents, at your expense through payroll deduction.
• Retirement: Travelers will make a core contribution of a percentage of salary to your Pension Plan. Additionally, if you decide to contribute to the plan, you will receive an increased company contribution.
• Holiday Entitlement: Start your career at Travelers with a minimum of 25 days holiday entitlement annually, plus the opportunity to purchase additional days to allow for up to a total of 35 holidays per year.
• Wellness Programme: The Travelers wellness programme is comprised of tools, discounts and resources that empower you to achieve your wellness goals and caregiving needs. In addition, our mental health programme provides access to free professional counseling services and other resources that support your daily life needs.
• Volunteer Encouragement: We have a deep commitment to the communities we serve and encourage our employees to get involved. Travelers has a Matching Gift and Volunteer Rewards programme that enables you to give back to the charity of your choice.

Employment Practices

Travelers is an equal opportunity employer. We value the unique abilities and talents each individual brings to our organization and recognize that we benefit in numerous ways from our differences.

If you are a candidate and have specific questions regarding the physical requirements of this role, please send us an email so we may assist you.

Travelers reserves the right to fill this position at a level above or below the level included in this posting.

To learn more about our comprehensive benefit programs please visit http://careers.travelers.com/life-at-travelers/benefits/.