IT Risk Officer

4 weeks ago


Hertfordshire, United Kingdom BNP Paribas Full time

IT RISK OFFICER (JOB NUMBER: IRO-ML-0123)

This role will oversee and monitor the IT risk management system, with particular attention to the management of major IT risks for Pinnacle Pet Group.

You will be working alongside the CRO and IT General Management team to oversee and monitor the Group IT Risk and Governance Framework and to engage with stakeholders and senior management, for the delivery of controls relating to IT risks on IT Security, IT Continuity, IT Governance, IT HR Management, IT Legal aspects, IT Sourcing / IT procurement, IT Compliance, IT Obsolescence, IT Execution processes, Shadow IT, IT Licenses, Datacenters and IT Outsourcing.

**Key Responsibilities**:

- Ensure reporting to relevant stakeholders for IT risk management those risks that have a “material” impact on the objectives or results, and are of a nature that requires the stakeholder’s attention.
- Identify the means and follow action plans to respond to IT risks, by ensuring the completeness and exhaustiveness of the action plans, ensuring the follow-up of progress, and updating regularly the status of each IT risks in corresponding logs.
- Manage the process for acceptance of IT Risks, ensuring that the non-tolerable IT risks are formally accepted by the relevant stakeholders and monitored following the defined process.
- Oversee and report on the output of control activities relating to IT risk conducted by the first line of defence.
- Analyse the results of the controls to identify specific risks and register them into the IT Risk Register or the Group Risk Register (as appropriate).
- Participate in the work of the IT Risk committee in order to provide to the COO with challenge of the IT Risks status.
- Oversee the closure of recommendations related to the Group issued by the Group's internal or external auditors and / or control functions in accordance with the objectives of risk coverage and planning.
- Monitor the conformity level for all IT governance rules with declaration of any non-compliance.
- Review and assess the analysis of significant incidents by the first line of defence to help estimate the level of operational risk.
- Review the output of IT Risk Maturity Evaluation.
- Review and challenge the IT Risk Mapping.
- Ensure communication and awareness on good IT risk management practices.

**Additional Responsibilities**:
To support and assist the CRO and other members of the Business Risk and Controls team to identify, report, escalate, manage, mitigate and consolidate with all other non-IT risks affecting the business. In particular to
- give the Board of Directors of the Company a clear view of all the risks within individual areas of the business or affecting the business as a whole and information on the mitigation or management of those risks;
- assist in the identification and management of all operational risk incidents with oversight of all actions necessary for closure;
- permit oversight and management of the closure of all internal and external audit recommendations;
- deliver reporting to the Risk & Audit Committee, Executive Risk and Control Committee, Investment & Capital Committee, Underwriting Credit and ALM Risks Committee, Customer & Conduct Committee, Cyber & IT Risk Committee and Vendor Risk Management Forum.

**Key skills**:
**Essential**
- Knowledge of IT risk management and analysis methods
- Good knowledge of IT organisations and professions
- Relevant IT technical knowledge
- Experience with internal / external Security and Governance audits.
- Use of Corporate and Group tools related to IT Risk management
- Ability to conduct professional discussions face-to-face or on the phone
- Ability to adapt communication to material relevant to varying audiences (IT and non-IT), and the situation.
- Be educational and effective in communication
- Have the ability to provide advice / recommendation / judgment by taking a step back and looking at the overall picture
- Ability to identify and engage resources and coordinate their intervention, working in teams and / or across multiple teams.
- Ability to accurately evaluate a situation and facts
- An understanding of best practices for Incident handling, security investigation processes and techniques.
- Experience with the latest information security threats & vulnerabilities and appropriate counter measures,

**Desirable**
- Experience with attack monitoring and Intrusion Detection (IDS/IPS), SIEM, Anti-Virus, WAF, Firewalls, Identity and Access Management (IAM), patch management, and encryption,
- Experience with, and in-depth understanding of security vulnerability tools, techniques, and standards used to conduct penetration testing
- Knowledge of regulations and frameworks related to IT Security and Personal Data Protection will be an asset

**Desirable Qualifications**:

- An understanding of CIS20, NIST, ISO 27001/22301 and SOC 2 frameworks.
- Security related degrees and/or relevant industry qualifications such as CRISC, CISSP, CISA



  • Hertfordshire, United Kingdom Kind Consultancy Ltd Full time

    Kind Consultancy is working with a new challenger bank which is seeking a Prudential Risk Officer to join their offices in Hertfordshire in a permanent, full time role with a hybrid working model. Reporting to the Head of Risk, the Prudential Risk Officer will act as second-line oversight for Prudential Risk across the bank, with key responsibilities...


  • East Hertfordshire, Hertfordshire, United Kingdom Clear IT Recruitment Full time

    My client is recruiting for a Risk and Compliance Executive to join their law firm in Bishops Stortford, Hertfordshire. Due to the growth of their firm, they have an excellent opportunity for a legal Risk and Compliance professional to join them to help enhance their processes, embed a compliance culture and reduce risk across all areas of the...


  • Hertfordshire, United Kingdom Canada Life Group Ltd Full time

    Location:Potters Bar or LondonCanada Life UK looks after the retirement, investment and protection needs of individuals, families and companies. We help to build better futures for our customers, our intermediaries and our employees by operating as a modern, agile and welcoming organisation.Part of our parent company Great-West Lifeco, Canada Life UK has...

  • Fire Risk Assessor

    1 week ago


    St Albans, Hertfordshire, United Kingdom Thrive Homes Full time

    Fire Risk Assessor / Fire Officer Hertfordshire, Buckinghamshire and Bedfordshire (Hybrid/Smart Working with Travel) Salary £45,000 Per Annum Plus Excellent Benefits Permanent, Full Time 37 hours per week (Monday Friday, Flexibility Negotiable) Are you an experienced Fire Risk Assessor? Do you hold a NEBOSH Fire Certificate or an CFPA Fire Diploma? ...

  • Risk Manager

    1 month ago


    Hitchin, Hertfordshire, United Kingdom Turner & Townsend Full time

    This job is brought to you by Jobs/Redefined, the UK's leading over-50s age inclusive jobs board. Company Description At Turner & Townsend we're passionate about making the difference. That means delivering better outcomes for our clients, helping our people to realize their potential, and doing our part to create a prosperous society. Every day...

  • Risk Manager

    1 month ago


    Hitchin, Hertfordshire, United Kingdom Turner & Townsend Full time

    That means delivering better outcomes for our clients, helping our people to realize their potential, and doing our part to create a prosperous society. Every day we help our major global clients deliver ambitious and highly technical projects, in over 110 offices worldwide. We are currently recruiting for Risk Managers within our Project Controls Team,...


  • Watford, Hertfordshire, United Kingdom Consult Energy UK Full time

    Job Description PROGRAMME MANAGEMENT OFFICE ANALYST An experienced PMO analyst is required to join one our established leading energy suppliers on a permanent basis. To help on a broad range of system and business projects, provide assurance, governance and support to the portfolio. Experience working as a PMO Analyst (Either within a Team or...


  • Watford, Hertfordshire, United Kingdom Consult Energy UK Full time

    PROGRAMME MANAGEMENT OFFICE ANALYST An experienced PMO analyst is required to join one our established leading energy suppliers on a permanent basis. To help on a broad range of system and business projects, provide assurance, governance and support to the portfolio. Experience working as a PMO Analyst (Either within a Team or standalone) Strong ability...


  • Watford, Hertfordshire, United Kingdom Consult Energy UK Full time

    PROGRAMME MANAGEMENT OFFICE ANALYST An experienced PMO analyst is required to join one our established leading energy suppliers on a permanent basis. To help on a broad range of system and business projects, provide assurance, governance and support to the portfolio. Experience working as a PMO Analyst (Either within a Team or standalone) Strong ability...


  • Potters Bar, Hertfordshire, United Kingdom Canada Life Group (UK) Ltd (The) Full time

    Location: Hybrid role based ideally in our UK offices in Potters Bar, London or our Dublin offices What we offer We have embraced a hybrid working model for most of our positions, which means that you can enjoy a balanced approach of working from home for part of the week and working from the office for the remainder of the week. We offer a comprehensive...


  • Potters Bar, Hertfordshire, United Kingdom Canada Life Group (UK) Ltd (The) Full time

    Location: Hybrid role based ideally in our UK offices in Potters Bar, London or our Dublin offices What we offer We have embraced a hybrid working model for most of our positions, which means that you can enjoy a balanced approach of working from home for part of the week and working from the office for the remainder of the week. We offer a comprehensive...


  • Hertfordshire, United Kingdom Fawkes & Reece Full time

    **Location**: Hertfordshire **Salary**: £21K- £25K per Year **Contract**: Permanent **Type**: Full Time **Reference**: CLODX_1680017826 **Posted**: March 28, 2023 Customer Liaison Officer 12 months Fixed Term Contract Upto £25k Hemel Hempstead office based 8am-5pm Monday-Friday MUST HAVE SOCIAL HOUSING EXPERIENCE Fawkes & Reece are currently...

  • Governance Officer

    2 weeks ago


    Borehamwood, Hertfordshire, United Kingdom Burton Bolton & Rose Recruitment Services Ltd Full time

    If you are an administrator with either governance, quality or compliance experience then this role for a Governance Officer will really suit you. Some of your duties will include: Providing support to various work streams and managing information governance Reporting on patient safety, complaints, clinical audits and risk management and quality...


  • Hertfordshire, United Kingdom InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment Full time

    Want multiple, complex, challenging projects in which you can make a real impact? Work for a business which offer unlimited training, a clear path for progression and exposure to the newest technology? Do you want the opportunity to grow and progress into a Leading member of an outstanding team? We are looking for a Project Manager to join an Expert...


  • Hertfordshire, United Kingdom InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment Full time

    Want multiple, complex, challenging projects in which you can make a real impact? Work for a business which offer unlimited training, a clear path for progression and exposure to the newest technology? Do you want the opportunity to grow and progress into a Leading member of an outstanding team? We are looking for a Project Manager to join an Expert...


  • Hertfordshire, United Kingdom InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment Full time

    Job Description Want multiple, complex, challenging projects in which you can make a real impact? Work for a business which offer unlimited training, a clear path for progression and exposure to the newest technology? Do you want the opportunity to grow and progress into a Leading member of an outstanding team? We are looking for a Project Manager to...


  • Hertfordshire, United Kingdom InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment Full time

    Want multiple, complex, challenging projects in which you can make a real impact? Work for a business which offer unlimited training, a clear path for progression and exposure to the newest technology? Do you want the opportunity to grow and progress into a Leading member of an outstanding team? We are looking for a Project Manager to join an Expert...


  • Hertfordshire, United Kingdom InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment Full time

    Want multiple, complex, challenging projects in which you can make a real impact? Work for a business which offer unlimited training, a clear path for progression and exposure to the newest technology? Do you want the opportunity to grow and progress into a Leading member of an outstanding team? We are looking for a Project Manager to join an Expert...


  • Hertfordshire, United Kingdom InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment Full time

    Job Description Want multiple, complex, challenging projects in which you can make a real impact? Work for a business which offer unlimited training, a clear path for progression and exposure to the newest technology? Do you want the opportunity to grow and progress into a Leading member of an outstanding team? We are looking for a Project Manager to...


  • Hertfordshire, United Kingdom InfraView - Specialist Cloud & IT Infrastructure Technology Recruitment Full time

    Want multiple, complex, challenging projects in which you can make a real impact? Work for a business which offer unlimited training, a clear path for progression and exposure to the newest technology? Do you want the opportunity to grow and progress into a Leading member of an outstanding team? We are looking for a Project Manager to join an Expert Managed...