Title:  Technology Risk Senior Business Partner

Location: Hybrid role based ideally in our UK offices in Potters Bar, London or our Dublin offices

What we offer
We have embraced a hybrid working model for most of our positions, which means that you can enjoy a balanced approach of working from home for part of the week and working from the office for the remainder of the week.

We offer a comprehensive benefits package including competitive salaries and bonuses, robust Learning and Development support, excellent Defined Contribution pension and comprehensive Wellbeing initiatives and support to name but a few. Some benefits may depend on location.   

We have created an environment of inclusion and growth to help people achieve their potential, to ensure they can bring their whole selves to work and to feel valued.  

We celebrate diversity of thought and perspective and want all of our employees to feel valued, respected and supported.  We have built a culture that promotes equality and inclusion for all of our current and future employees and strive to ensure that our behaviours, processes, and practices are aligned to this culture.

Role Overview
This new role will be responsible for second line oversight of technology risk and cyber security for Canada Life UK and Canada Life Europe (Germany). In this role, you will help develop and implement the vision and future roadmap for second line business partnering and oversight across the European business segment that reflects and supports the current and future needs of the organisation.

Team Background
Technology Risk and Operational Resilience Oversight sits within Canada Life Group and is accountable for independent “Second line of Defence” oversight of technology, cyber security and operational resilience activities across all European entities including Irish Life Group, Canada Life UK and Canada Life Europe.  Technology Risk and Operational Resilience Oversight is at an important stage in its evolution, following the introduction of the new first line Technology Risk and Security team operating model within the newly formed Office of the CIO (OCIO), Europe.  

The first line team is taking ownership of the development and coordination of technology risk and information security operations activities and implementing the risk management framework as set out in the policy and standards framework. The second line team has been realigned in terms of accountabilities, resources, and capabilities to deliver its mandate for impactful challenge, oversight and business partnership across technology, cyber and operational resilience activities of the European businesses.

What you will help us to achieve
Reporting to the Technology Risk & Operational Resilience Officer, Europe, you will lead the second line Technology Risk and Information Security business partnership relationship with Canada Life UK and Canada
Life Europe (Germany). In addition, you will be the second line SME for one or more domain areas e.g. cyber security, cloud technology, technology infrastructure or SDLC.  You will have the opportunity to help develop and implement the vision and future roadmap for second line support of technology risk and information security across the European business segment that reflects and
supports the current and future needs of the organisation. It will involve significant senior level engagement and stakeholder management across multiple functions and or lines of business in Europe and with Lifeco.

More specific responsibilities will include
Leadership:

• Provide influential leadership in developing and communicating clear long-term visions for second line oversight of technology risk and information security.
• Offer expert advice to support risk-based decision-making and alignment with regulatory requirements.
• Communicate effectively with stakeholders at all levels and establish thought leadership in technology risk management.

Strategy & Planning:

• Develop strategies and plans to address significant technology and information security risks.
• Collaborate with leadership to develop aligned strategies and cultivate senior-level relationships internally and externally.
• Provide strategic advice to business entities and functions and contribute to annual planning and budgeting processes.

Risk Management and Executive Engagement:

• Work with relevant teams to implement clear policies and standards for technology and information security risk management.
• Report on the current state of technology and information security risk management and escalate concerns as needed.
• Undertake independent reviews and provide analysis on emerging threats and cyber events.

Governance and Operations:

• Ensure effective executive risk committees and adherence to technology and information security risks standards.
• Collaborate with CIOs and risk leads to ensure adequate funding and support for risk initiatives.
• Drive continuous improvement in processes and support engagement with regulators.

What you will need to be successful in the role

• Deep knowledge of risk management frameworks, particularly in technology, security, and resilience operations.
• Strong expertise in at least one technology domain such as information security, cloud technology, technology infrastructure, or SDLC.
• Proven track record in leading technology risk and security areas in large complex corporations.
• Familiarity with compliance, regulatory matters, and European regulatory trends.
• Experience presenting to Business Executives, Boards, and Regulators.
• Strategic thinker capable of implementing technology risk and cyber security vision aligned with organizational needs.
• Experience using market trends and technology innovation for practical applications

Key Competencies
Strategy Based Capabilities 

• Stakeholder Focus - Consider key stakeholder needs to make timely decisions that drive superior and sustainable business and financial results
• Drive Business Growth & Resilience - Focus on areas of growth, applying an enterprise mindset, considering the external environment to seize emerging opportunities and address challenges

People Based Capabilities 

• Developing High Performing Teams - Actively build and develop a diverse team and create an inclusive environment where people can thrive
• Build Collaborative Partnerships - Build strong collaborative partnerships across the business
   

Performance based Capabilities 

• Deliver Performance & Value - Lead with operational excellence to most efficiently and effectively drive the delivery of results
• Lead The Way Forward - Inspire a vision, articulate meaningful expectations, and clear pathways to desired outcomes. Is able to quickly adapt to new realities even in the face of ambiguity and uncertainty

Risk Control and Regulatory Environment 

• Builds and maintains a culture that fosters the integration of risk and controls into the business.
• Ensures their people understand the risks in the area for which they are responsible and ensure that appropriate controls are in place, monitored and reviewed regularly

Commercial Awareness 

• Has an in-depth understanding of the drivers of growth and profit in the business. Manages costs effectively and has a clear view on how best to maximise the potential of their business

Fitness & Probity
This role is a ‘controlled function’ as defined by the Central Bank Reform Act 2010 Regulations 2011. Any appointment will be conditional on the company being satisfied that the appointee meets the requirements as set out in the Fitness and Probity standards issued by the Central Bank. This requires the company to complete prescribed due diligence to assess the appointee’s fitness and probity. Further details on this due diligence process are available from Human Resources.

About us
The Canada Life Group (UK) Limited (‘CLG’) is the top-level European holding company for the Great-West’s Lifeco Group’s European insurance, reinsurance, and asset management companies, with business operations in the UK, Ireland, Germany and the Isle of Man. CLG’s corporate objectives include providing management oversight of European Group business strategies and the risks that such strategies entail.  Technology Risk and Operational Resilience Oversight sits within Canada Life Group and is accountable for independent “Second line of Defence” oversight of technology, cyber security and operational resilience activities across all European entities including Irish Life Group, Canada Life UK and Canada Life Europe. There are 13 distinct IT units, each of which has its own individual set of technology platforms. CLGS supports Equal Opportunity and is regulated by the Central Bank of Ireland.