Senior IT Risk Officer
Role details
Job location
Tech stack
Job description
The purpose of this role is to improve technology risk management in an effective manner, to ensure that LCH SA Business, Data and IT assets are adequately protected with full respect for the existing policies, standards and regulations. This role will strongly contribute to implementing appropriate policies, standards, procedures, processes, and assessing risks by identifying, analyzing, and responding to risks through the risk framework. The role is set within LCH SA IT Risk team, working with different LSEG partners. Responsibilities / Activities include:
- Coordinate with IT Risk owners to identify, assess, track, monitor and report on the risks and remediation plans
- Find opportunities to enhance risk standards, processes and procedures to improve the risk management framework and its implementation
- Draft key management information for risk committees and working groups for LCH SA, LCH Ltd and the Group
- Work with various partners to ensure the appropriate governance is well prepared and completed
- Perform gap analysis following annual Technology policy and Technology standards updates
- Engage with various 1st Line and 2nd Line collaborators for monitoring of the issues remediation and key risk indicators
- Collaborate with the Second Line of Defense team, Internal audit team and Compliance team to provide appropriate supervision over IT remediation progress of risk, audit and regulatory observations
- Work with all the interested parties to ensure appropriate technology controls design, implementation, assessment, monitoring and reporting
- Liaise with London teams, from LCH Ltd and LSEG teams to ensure alignment and progress update on Ltd and Group observations impacting LCH SA Risk profile
- Contribute to improving the existing documentation needed by the LCH SA IT department (process, procedures, risk assessment questionary, regulations assessments etc.).
- Maintain and update the risk tracker, enable the processes, tools, and techniques required to ensure timely and appropriate generation, collection, distribution, and disposition of issues progress and status information to project participants
- Engage with Internal Audit, 2nd Line Risk and 2nd Line Compliance to manage expectations
- Consolidate and coordinate IT contributions to deliver regulatory annual reports (AMF, REGSCI, CCO reports)
- Coordinate with 1st Line to ensure good running of Internal Audit examination, External Audit (CAC, RegSCI, CFTC, …) and Regulatory examinations (SEC, ACPR, …)
Requirements
Do you have experience in Risk management?