Senior Associate /Manager – Technology Risk and Assurance

Willis Towers Watson; Ipswich; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

25 days annual leave

Private healthcare

Pension scheme

Job summary

Willis Towers Watson is seeking a Senior Associate/Manager in Technology Risk and Assurance to support the GRC team across IT and cyber regulatory engagements. Hybrid work from London or Ipswich with initial in-office attendance required 1-2 days/week.

You will lead remediation efforts, map standards to regulatory requirements, and deliver high-quality responses to RFIs and audits. The role requires strong communication, extensive GRC/InfoSec experience, and ability to work autonomously in a

Qualifications

• Extensive experience in GRC, Information Security, or Information Technology.
• Demonstrable experience in applying regulatory requirements to security practices.
• Strong Project Management skills and experience.
• Excellent writing, presentation, and communication skills.

Responsibilities

• Execute regulatory deliverables, RFIs, audits and regulatory questionnaire submissions with focus on GRC, IC & Technology Risk.
• Define communications with regulators, control owners and senior management regarding regulatory deliverables.
• Map IC & Technology standards to regulatory requirements with IC & Policies teams.
• Coordinate high quality and timely responses to information requests and audits.
• Support GRC controls testing and remediation of identified issues and gaps.
• Engage with GRC Risk Team to ensure risks are reported and managed.
• Assist management reporting around engagement status and issues.
• Collaborate with Audit, Compliance, Privacy and tech partners to track compliance across organization.
• Develop and maintain Regulatory engagement templates and tools.

Skills

GRC expertise

Information security

Regulatory requirements

Risk management

Project management

Communication skills

Analytical problem solving

Autonomy

Team collaboration

Education

IT or GRC degree

InfoSec certifications (CISSP, CCSP, CISA, CRISC, CISM)

PMP certification

Job description

Description

As a Senior Associate / Manager – Technology Risk and Assurance, you will use your skills and experience to support Governance Risk and Compliance (GRC) team responsible for delivering technology and cyber regulatory engagements. Working closely with the wider GRC teams and their subject matter experts, further engagement will be across WTW which may include Technology, Cyber Security, Business Operations, Internal Audit, Compliance, Risk, Privacy and Legal.

You will support and monitor remediation activities where gaps have been identified across multiple regulated environments as applies to Information and Cyber Security and IT regulatory related requirements. You will be familiar with different industry standards and best practices for GRC-related IT and Cyber Security risk. Strong communication skills are a requirement as a supportive team player, resourceful, independent and adaptive to change. The role will be based in either our London or Ipswich office and will follow a hybrid working model, subject to business needs. During the initial training period, the successful candidate will be expected to attend the office one to two days per week.

The Role:

The responsibilities of this role will include:

• Execution of regulatory deliverables, Request for Information (RFIs), Audits and Regulatory questionnaire submissions with a focus on GRC, IC & Technology Risk within a specified time and schedule.
• Define communications (planning, scoping, issues) engagement with stakeholders (regulators, control owners, senior management) related to regulatory deliverables, RFIs, audits and Regulatory questionnaire submissions.
• Engage with IC & Policies and Standard team to map IC & Technology standards to the regulatory requirements.
• Co-ordinating and developing high quality and timely responses to requests for information, ensuring consistency and leveraging evidence where possible.
• Engage with the GRC controls testing team where application controls testing is required. Furthermore, support and monitor identified issues and gaps.
• Support, manage, and monitor identification and remediation of issue and gaps in line with WTW controls and regulatory requirements.
• Engage with GRC Risk Team to ensure that the identified risks are reported and managed in line with the risk processes.
• Support management reporting specifically around engagement status and issue management.
• Supporting wider team throughout the regulatory engagements.
• Contribute to the creation of and delivery of presentations and briefings as required for the key stakeholders.
• Generating reports for technical and non-technical stakeholders, including the creation of documentation.
• Understanding wider GRC, IT and IC functions and better understanding their Roles and Responsibilities to support our delivery.

Cross-Functional Collaboration:

• Collaborate with other regulatory compliance functions – e.g. Audit, Compliance, and Privacy, tech partners – to track compliance across the organization and pool expertise on vague or complex regulatory requirements.

• Work with business units to ensure controls are effective and appropriately address to the relevant regulatory requirements they address.

• Facilitate in attesting and demonstrating compliance with relevant authorities, regulators and auditors during compliance assessment and/or audits.

Regulatory Engagements Programs:

• Collaborate in the developing and shaping Regulatory engagement operating model and standard processes.

• Devise and upkeep templates and tools to assist in implementing various GRC Regulatory Engagement programs and reporting.

• Supporting the implementation, alignment to, maintenance and monitoring of controls following Information Security standard and framework.

Qualifications

What you'll bring:

• Extensive experience in GRC, Information Security, or Information Technology, with a proven ability to lead and deliver security, risk, and compliance initiatives.
• Experienced in identifying and managing Risk and compensating Controls.
• Demonstrable experience in analyzing and applying regulatory requirements to security practices.
• Demonstrable experience in supporting the business to implement controls to meet and maintain compliance in a highly complex global organization.
• Strong Project Management skills and experience.
• Excellent writing, presentation, and communication skills
• Experience of working with a high degree of autonomy, managing own workload and delivering tight timescales
• Familiarity with other technology, cybersecurity and privacy regulations would be beneficial.
• Excellent analytical problem-solving skills
• General knowledge of IT operations
• Holistic understanding of risk processes and functions.
• Good communication skills.
• Global team player with good interpersonal and influencing skills.
• Customer focus and relationship management.
• Good analytical skills - ability to review and challenge materials produced by colleagues.
• Delivery focused, possessing high levels of resilience and determination.
• Ability to manage multiple, and changing, priorities.
• Strong desire to continue to learn.
• Ideally qualified to degree level, in IT or GRC related subject.
• Information security certifications (e.g. CISSP, CCSP, CISA, CRISC, CISM, ISO 27001 LA) are preferable.
• Project Management certification (e.g. PMP) is also preferable.

What We Offer

Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company.

We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you.

Equal Opportunity Employer

We're committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email [e-mail]