Senior Risk Manager

London

Everest

At Everest, we underwrite opportunity for all stakeholders with protection and peace of mind in an increasingly complex and uncertain world.

View all jobs at Everest

Apply now Apply later

Title:

Senior Risk Manager

Company:

Everest Advisors (Uk), Ltd.

Job Category:

Technology

Job Description:

About Everest:

Everest is a leading global reinsurance and insurance provider, operating for nearly 50 years through subsidiaries in the Europe, Bermuda, Canada, Singapore, US, Latin America and other territories. Our strengths include extensive product and distribution capabilities, a strong balance sheet, and an innovative culture. Throughout our history, Everest has maintained its discipline and focuses on creating long-term value through underwriting excellence and strong risk and capital management. But the most critical asset in this organization is our people.   

Job Summary:

Our IT International Risk team is dedicated to safeguarding our global operations by identifying, assessing, and mitigating technological risks across international boundaries. We ensure that our organization adheres to diverse regulatory requirements, protecting our digital assets and maintaining the highest standards of cybersecurity. Through rigorous risk assessments, continuous monitoring, and proactive threat management, we enhance our global resilience and operational efficiency. Our team collaborates with international partners and departments to implement robust security controls and respond effectively to emerging threats. We are committed to creating a secure and compliant environment that supports our organization's global strategic goals with confidence.  

  

Role Purpose:

  • Overseeing the alignment of the development, implementation, and management of the IT GRC framework from Group to International 

  • The role ensures that IT Processes and controls are in compliance with regulatory requirements, industry standards and corporate policies. 

  • Supporting the Head of International IT Risk and Security on the strategic direction and thought leadership in the IT GRC 

 

Key Accountabilities:

  • Ensure alignment of IT Governance with corporate governance and business objectives 

  • Setting of policy and procedures defining the Information Security standards In-line with Group best practices  

  • Adapting IT Governance to support our infrastructure Cloud Strategy, minimising transformation risk 

  • Monitor and report on IT governance by developing performance metrics 

  •  Identify, assess, and prioritise IT risks across the International Business 

  • Where risks are identified, assist in the development of risk mitigation strategies and action plans.  Track action plans to completion. 

  • Collaborate with the 2LOD to conduct regular risk assessments and audits to ensure risk management effectiveness. 

  • Co-ordinate and manage IT compliance audits and assessments. 

  • Collaborate with senior management and other stakeholders to ensure IT GRC initiatives support business goals. 

  • Support Red Team and other penetration testing activities. 

  • Support the Head of International Risk & Security in developing specific management information for board presentations. 

 

Professional Experience: 

  • At least 7-10 years of experience in IT governance, risk management and compliance 

  • Relevant certifications (e.g. CISA, CISM, CRISC, CISSP) desirable 

  • Strong knowledge of regulatory requirements applicable to the Insurance market, and industry standards such as (but not limited to) ISO27001, NIST and CIS 

  • Proven experience in developing and implementing IT GRC frameworks. 

 

Skills & Abilities: 

  • Excellent leadership communication and interpersonal skills 

  • Strong analytical and problem-solving abilities 

  • Ability to work effectively in a fast-paced and dynamic environment. 

  • Ability to work autonomously and as part of the wider IT risk team. 

 

Our Culture  

At Everest, our purpose is to provide the world with protection. We help clients and businesses thrive, fuel global economies, and create sustainable value for our colleagues, shareholders and the communities that we serve. We also pride ourselves on having a unique and inclusive culture which is driven by a unified set of values and behaviours. Click hereto learn more about our culture.  

   

  • Our Values are the guiding principles that inform our decisions, actions and behaviours. They are an expression of our culture and an integral part of how we work: Talent. Thoughtful assumption of risk. Execution. Efficiency. Humility. Leadership. Collaboration. Diversity, Equity and Inclusion.   

  • Our Colleague Behaviours define how we operate and interact with each other no matter our location, level or function: Respect everyone. Pursue better. Lead by example. Own our outcomes. Win together.   

   

All colleagues are held accountable to upholding and supporting our values and behaviours across the company. This includes day to day interactions with fellow colleagues, and the global communities we serve.   

 

Type:

Regular

Time Type:

Full time

Primary Location:

London

Additional Locations:

GDPR Privacy Notice | Everest (everestglobal.com)

Apply now Apply later

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  0  0  0

Tags: Audits CISA CISM CISSP Cloud Compliance CRISC GDPR Governance ISO 27001 Monitoring NIST Pentesting Privacy Red team Risk assessment Risk management Strategy

Region: Europe
Country: United Kingdom

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.