IT Risk Senior Analyst
Role details
Job location
Tech stack
Job description
We have an exciting opportunity to join our IT Risk function as a Senior IT Risk Analyst. This role is ideal for someone with a strong foundation in IT risk and control frameworks, technology audit, risk management, and reporting-who thrives in ambiguity and enjoys working across complex systems and stakeholder groups.
Reporting to the Global Independent Controls Assurance (ICA) Manager, you'll play a key role in improving and embedding technology risk practices and culture across the divisions, working closely with Divisional and Global IT teams, Business Operations, and Enterprise Risk Management.
You'll be involved in tasks related to both independent controls testing and applications attestation.
This is a hands-on role with a strong emphasis on stakeholder engagement.
Your New Role:
- Support the Global ICA Manager and vendor in shaping the governance and managing the attestation process within ServiceNow IRM, ensuring critical applications meet compliance requirements.
- Review and validate system outputs, challenging discrepancies between expected and actual results, and escalating for further support where appropriate.
- Create and maintain risks and issue trackers, extract/upload data to GRC tools, produce divisional IT risk dashboards, and prepare reporting packs for senior stakeholders.
- Deliver actionable insights through Power BI and advanced Excel reporting for ICA and Application Attestation activities.
- Act as a subject matter expert, collaborating with third-party vendors on solution design and process improvements for ICA and attestation services.
- Support the Global ICA Manager with QA checks on ICA assessments and vendor test results to ensure alignment with agreed quality standards.
- Build strong relationships across divisions, guiding stakeholders through delivery pressures and aligning on risk priorities.
This role is part of our Group division, which occasionally requires flexibility beyond the typical 9am-5pm schedule. However, usually you will not be expected to work more than the standard 7 hours per day.
Having the right to work in the UK is a requirement for this role. QBE may consider sponsorship at its discretion.
Requirements
- Proven experience in Technology Risk, Audit, Compliance, or a related discipline, ideally within a global organisation.
- Background in Financial Services and ability to navigate complex federated structures like QBE's operating model.
- Working knowledge of NIST, ISO, COBIT and other risk management frameworks
- Advanced Excel (including VBA), Power BI, and SharePoint proficiency; experience with GRC tools such as Archer for data extraction and reporting.
- Skilled in presenting to senior leadership and translating insights into clear, meaningful narratives.
- Comfortable working in ambiguity, managing multiple priorities, and adjusting to evolving delivery models.
- Professional certifications (like CISA, CISSP, CISM, CRISC) and scripting experience (Python/PowerShell) for audit automation is highly desirable. ?