IT Risk Management Assurance Specialist

3 weeks ago


London, Greater London, United Kingdom Howden Group Holdings Full time

Who are we?

Howden is a collective – a group of talented and passionate individuals from across the globe. Together, we have redefined the landscape of insurance. Our unity stems from a shared enthusiasm and a limitless mindset, and our strength lies in our ability to collaborate as a formidable international team comprising 18,000 employees across over 100 countries.

People join Howden for various reasons, but they remain for a singular one: our culture. It's what distinguishes us and the reason our employees have consistently turned down headhunters. Regardless of your priorities – work/life balance, career advancement, sustainability, or community service – you'll find like-minded individuals driving change at Howden.

Howden is seeking an IT Risk Management Assurance Specialist to become a part of our central IT Governance team. This role encompasses supporting the establishment and upkeep of an IT internal control framework grounded in COBIT principles. Key responsibilities include managing risk, facilitating internal and external audits, and enhancing existing IT risk management policies and standards.

Please note this is a full-time, permanent position. The role follows a hybrid work model with an expectation of being onsite three days per week on average.

Role Responsibilities:

Control Framework

  • Collaborate with the IT Assurance team to uphold the IT internal control framework.
  • Integrate the IT internal control framework into the organization through implementation workshops covering controls and policies (e.g., Logical Access, Change Management, and IT Operations).
  • Assist in refining the framework in alignment with Howden's objectives.
  • Identify modifications to the IT internal control framework that will enhance efficiency and effectiveness, including the elimination of redundant controls and the increase of automation.
  • Ensure continuous improvement of the IT internal control framework, adopting a top-down risk-based approach.
  • Reassess the IT internal control framework to eliminate or modify key controls, enhancing efficiency and effectiveness while appropriately mitigating risk.
  • Engage with various countries on inquiries related to the IT internal control framework to promote consistency across Howden Group.
  • Oversee the implementation of the IT internal control framework in newly included countries.
  • Provide ongoing training and awareness to the community regarding IT Risks and Controls, as well as the operation of the attestation platform.
  • Conduct the management self-attestation program quarterly, which includes: (1) Evaluating and consolidating results, (2) Monitoring exceptions, (3) Reviewing remediation plans defined by IT component owners, (4) Reporting the status of the self-attestation program.
  • Assess key applications and offer expertise for SOX compliance.
  • Manage and coordinate IT requirements for DORA.

Risk Management

  • The IT Risk Management Assurance Specialist is expected to be a subject matter expert in IT Risk Management. You will review annual market scoping and risk assessments to reflect changes.
  • Conduct the Group IT Risk management review quarterly, which includes: (1) Performing likelihood and impact risk analysis (risk measurement) and assessing risk categorization with risk owners, (2) Managing the mitigation process through control identification/confirmation with risk owners, (3) Evaluating the Group IT control status, (4) Updating the CAMMS Risk platform.
  • Execute information security risk assessments to identify risk areas not addressed by existing IT controls.
  • Contribute to the enhancement of existing IT risk management policies and standards.
  • Review the maintenance and updates to IT risk management policies.

Internal and External Audit Management

  • Summarize IT internal and external control observations for the Audit Committee quarterly.
  • Assist Howden Group/Countries with Internal/External Audit findings.
  • Regularly follow up on Internal/External audit IT control observations with relevant stakeholders.
  • Coordinate IT risk management activities with Internal Audit and external auditors.

Role Requirements:

  • Previous experience in a similar IT role with responsibilities for IT internal controls and processes, preferably within the insurance sector or financial services industry.
  • Experience working on large projects or programs within IT Change.
  • Demonstrated knowledge of IT internal controls and familiarity with COBIT or similar IT risk management standards.
  • General knowledge and work experience in Risk Management or related fields such as Audit, IT Security, or Business Continuity.
  • Familiarity with controls related to the EU Digital Operational Resilience Act.

What do we offer in return?

A career that you define. At Howden, we value diversity – there is no singular Howden type. Instead, we're looking for individuals who share our values:

  • Our successes have all come from someone brave enough to try something new.
  • We support each other in both the small everyday moments and the larger challenges.
  • We are determined to make a positive difference at work and beyond.

Reasonable adjustments

We're committed to providing reasonable accommodations at Howden to ensure that our positions align well with your needs. In addition to the usual adjustments such as software, IT, and office setups, we can also accommodate other changes such as flexible hours or hybrid working.

If you're excited about this role but have some uncertainties regarding its fit for you, please submit your application – if your profile aligns with the role's criteria, we will reach out to assist in facilitating any reasonable adjustments you may require.



  • London, Greater London, United Kingdom Finitas Full time

    Job Opportunity: Finitas is seeking a highly skilled Risk Assurance Specialist to join their team.About the Role: As a Risk Assurance Specialist, you will be responsible for conducting end-to-end deep-dive reviews and control testing to ensure the effectiveness of internal controls. You will work closely with the Head of Assurance to identify and mitigate...


  • London, Greater London, United Kingdom Finitas Full time

    Job Summary:Finitas is seeking a highly skilled Risk Assurance Specialist to join their team in a growing Lloyd's broker. As a key member of the 2nd line function, you will be responsible for conducting risk assessments, deep dives, thematic reviews, and controls testing to provide assurance to senior management that the correct controls are in place.Key...


  • London, Greater London, United Kingdom Finitas Full time

    Job Summary:Finitas is seeking a highly skilled Risk Assurance Specialist to join their team. As a key member of the assurance function, you will play a critical role in ensuring the effectiveness of internal controls and risk management processes.Key Responsibilities:Perform end-to-end deep-dive reviews and control testing to identify and mitigate...


  • London, Greater London, United Kingdom Finitas Full time

    Job Summary:Finitas is seeking a highly skilled Risk Assurance Specialist to join their team. As a key member of the assurance function, you will play a critical role in ensuring the effectiveness of internal controls and risk management processes.Key Responsibilities:Perform end-to-end deep-dive reviews and control testing to identify and mitigate...


  • London, Greater London, United Kingdom Finitas Full time

    Job SummaryFinitas is seeking a highly skilled Risk Assurance Specialist to join their team. As a key member of the assurance function, you will play a critical role in ensuring the effectiveness of internal controls and risk management processes.About the RoleAs a Risk Assurance Specialist, you will be responsible for:Performing end-to-end deep-dive reviews...


  • London, Greater London, United Kingdom Audit & Risk Recruitment Full time £90,000 - £100,000

    Job SummaryAudit & Risk Recruitment is delighted to be working with a leading FTSE 100 business in the commodities trading and mining industry.Key ResponsibilitiesProvide risk and assurance expertise on matters related to Market Conduct Risk within Commodities Trading.Lead on audit strategy for marketing compliance areas such as market conduct, counterparty...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the CompanyLexisNexis Risk Solutions is a leading provider of risk assessment and fraud prevention solutions for businesses. Our company helps organizations mitigate risk and maximize revenue growth through our innovative solutions.About the RoleWe are seeking a highly skilled Risk Management Specialist to join our team. As a Risk Management...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the CompanyLexisNexis Risk Solutions is a leading provider of risk assessment and fraud prevention solutions for businesses. Our company helps organizations mitigate risk and maximize revenue growth through our innovative solutions.About the RoleWe are seeking a highly skilled Risk Management Specialist to join our team. As a Risk Management...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the CompanyLexisNexis Risk Solutions is a leading provider of risk assessment and fraud prevention solutions for businesses of all sizes. Our mission is to help organizations drive revenue growth, maximize operational efficiencies, and improve customer experience.About the RoleWe are seeking a highly skilled and proactive Risk Management Specialist to...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the CompanyLexisNexis Risk Solutions is a leading provider of risk assessment and fraud prevention solutions for businesses of all sizes. Our mission is to help organizations drive revenue growth, maximize operational efficiencies, and improve customer experience.About the RoleWe are seeking a highly skilled and proactive Risk Management Specialist to...


  • City of London, Greater London, United Kingdom Finitas Full time

    About the RoleFinitas is seeking a highly skilled Assurance Officer to join their team in a 2nd line function. As a key member of the team, you will be responsible for conducting risk assessments, deep dives, thematic reviews, and controls testing to provide assurance to senior management that the correct controls are in place.Key Responsibilities:Conduct...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the CompanyLexisNexis Risk Solutions is a leading provider of risk assessment solutions for businesses. Our company specializes in helping organizations mitigate risks and improve their operational efficiency.About the RoleWe are seeking a highly skilled Risk Management Specialist to join our team. As a Risk Management Specialist, you will work closely...


  • London, Greater London, United Kingdom BDO LLP Full time

    Job SummaryWe are seeking a highly skilled Technology Risk Assurance Specialist to join our team at BDO LLP. As a key member of our Audit practice, you will play a critical role in evaluating the risks associated with the use of technology for businesses in various sectors, including Financial Services.About the RoleThe Technology Risk Assurance team sits at...


  • London, Greater London, United Kingdom BDO LLP Full time

    Job SummaryWe are seeking a highly skilled Technology Risk Assurance Specialist to join our team at BDO LLP. As a key member of our Audit practice, you will play a critical role in evaluating the risks associated with the use of technology for businesses in various sectors, including Financial Services.About the RoleThe Technology Risk Assurance team sits at...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the Company: LexisNexis Risk Solutions is a leading provider of risk assessment solutions for businesses. Our company specializes in helping organizations mitigate risks and improve their operational efficiency.About the Team: You will be part of a collaborative and supportive team that works together to deliver innovative solutions to our customers....


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the BusinessLexisNexis Risk Solutions is a leading provider of risk assessment solutions for businesses. Our Business Services vertical offers a range of solutions designed to help companies drive revenue growth, maximize operational efficiency, and improve customer experience.We specialize in helping businesses solve complex problems in areas such as...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the BusinessLexisNexis Risk Solutions is a leading provider of risk assessment and fraud prevention solutions for businesses. Our solutions help companies mitigate risk, improve customer experience, and drive revenue growth.About the RoleAs a Risk Management Specialist, you will work with our customers and account managers to maximize the value...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the BusinessLexisNexis Risk Solutions is a leading provider of risk assessment and fraud prevention solutions for businesses. Our solutions help companies mitigate risk, improve customer experience, and drive revenue growth.About the RoleAs a Risk Management Specialist, you will work with our customers and account managers to maximize the value...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the RoleWe are seeking a highly skilled Risk Management Specialist to join our team at LexisNexis Risk Solutions. As a key member of our Business Services vertical, you will work closely with our customers and account managers to maximize the value delivered by our email-based risk assessment solution.Your results will lead to immediate real-world...


  • London, Greater London, United Kingdom LexisNexis Risk Solutions Full time

    About the RoleWe are seeking a highly skilled Risk Management Specialist to join our team at LexisNexis Risk Solutions. As a key member of our Business Services vertical, you will work closely with our customers and account managers to maximize the value delivered by our email-based risk assessment solution.Your results will lead to immediate real-world...