Performance and Governance Analyst

Primary Details

Time Type: Full time

Worker Type: Employee

The Group Chief Technology Office (CTO) delivers enterprise-wide technology capabilities and services to enhance divisional outcomes. We provide digital, cloud, and engineering services globally, leveraging synergies and driving simplification and consistency. This is achieved by creating reusable assets, patterns, and frameworks for divisional use. The successful candidate will join the CTO organization, helping to mature our end-to-end risk and control management, ensuring compliance with the risk management framework, policies, and standards, and ultimately achieving better outcomes for the enterprise.

The Performance and Governance Associate will help establish and embed the risk management function within the CTO organization. This includes building solid risk management foundations, ensuring transparency of risk activities, and driving a shift towards continuous assessment. The role involves leveraging insights and foresight to proactively strengthen our security and compliance position, providing data to aid oversight, and enabling risk-based decisions across the CTO.

As a Performance and Governance Associate, you will assist the Performance and Governance Lead in developing, conducting, and reporting on consistent functional risk and control assessments. Your responsibilities will include performing various control tests and risk reporting to ensure transparency of risk activities, progress in strengthening our risk culture, and compliance with IT controls. You will be responsible for undertaking risk assessments, gathering data, and maintaining risk and control registers as part of your broader remit.

Responsibilities:

• Enhancement:
  Establish and continue to enhance the IT Risk and Control management processes, driving an uplift in our risk-based culture.
• Prioritization
  : Track risk-related demand and prioritize efforts based on risk exposure.
• Proactivity
  : Drive proactive management of IT risks and issues through ongoing reviews and monitoring of Issues and Actions.
• Identification
  : Lead the identification and development of deep dives across the CTO towers to uncover emerging issues and support the business in better managing risk.
• Insightfulness
  : Deliver insightful reporting to identify key insights and actions. Collect risk information and metrics from the assigned CTO teams to support monitoring against risk appetite. Develop mechanisms to ensure adherence to policies and risk practices, and track risk actions within the CTO function.
• Review
  : Conduct reviews of Policy Exemptions and Risk Acceptances.
• Expertise
  : Provide expert advice and support to the CTO organization on risk assessment, responses to risks, and remediation actions.
• Relationships
  : Build and maintain strong relationships with key stakeholders such as Digital, Enterprise Platform owners, Security, Divisions, and Group Internal Audit to ensure that proactive risk management services meet their expectations.
• Collaboration
  : Work closely with the Technical SME to prepare the Risk and Control Self-assessments (RCSA); review and update the control language as necessary to ensure alignment with industry practice and consistency across the enterprise.
• Maturity
  : Work with technical SMEs to mature CTO's Minimum Control Standards, ensuring completeness and accuracy of control documentation, control assessment plans, and execution of control testing.

Work Experience:

Preferred Work Experience includes:

• Understanding of risks in key processes involved in providing enterprise platforms for global organisations.
• Understanding of risks inherent in large scale IT transformation programmes
• Problem solving mindset with tenacity to see solutions through to delivery.
• Problem solving, root cause analysis and facilitation.
• Ability to resolve issues under time constraint.
• Excellent communication skills with the ability to communicate at all levels.
• Summarize and communicate technical data to a non-technical audience.
• Excellent organizational skills.
• Ability to learn quickly.
• Ability to work in team. who are globally dispersed, as well as independently.
• Report writing and using Microsoft Office tools (e.g., Excel, PowerPoint, Word).

Qualifications:

Necessary Qualifications include:

• Education: Bachelor's Degree or equivalent combination of education and work experience in IT or Risk related subject
• Experience: Relevant years of experience

Global Disclaimer:

The duties listed in this job description do not limit the assignment of work. They are not to be construed as a complete list of the duties normally to be performed in the position or those occasionally assigned outside an employee's normal duties. Our Group Code of Ethics and Conduct addresses the responsibilities we all have at QBE to our company, to each other and to our customers, suppliers, communities and governments. It provides clear guidance to help us to make good judgement calls.

Skills:

Communication, Conflict Management, Critical Thinking, Decision Making, Enterprise Risk Management (ERM), Influencing Others (Inactive), Information Technology (IT) Risk Management, Intentional collaboration, IT Project Lifecycle, Managing performance, Prioritization, Report Writing, Risk Management, Stakeholder Management, Technology Risk Management

How to Apply:

To submit your application, click "Apply" and follow the step by step process.

Equal Employment Opportunity:

QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates.