IT Risk Management Analyst

The Opportunity: The purpose of this role is to support the NAU IT team with their risk management activities as well as engaging with the Enterprise Risk Management (ERM) team to execute the risk management program. Additionally, the role is responsible for ensuring adherence to relevant policies and standards governing Risk and Control Self-Assessment across the NAU IT organization, providing ongoing education and training, facilitating risk and control identification and assessment, and reporting progress and issues. The role will work closely with various teams to provide assurance over the Risk Management framework.

• Location: Council Bluffs, IA, Ramsey, MN or Fargo, ND
• Work Arrangement: This role will require 3 days/week in the office. The hours for this role are 7:30am-4:15pm CST Monday through Thursday, and 7:30am-12pm CST on Fridays
• The starting salary range for this role is between $91,500-$137,500 depending on experience.

Your New Role:

• Deliver insightful reporting on IT Risk Management activities.
• Collect risk information and metrics to support monitoring against risk appetite.
• Ensure adherence to all Risk standards within the organization.
• Perform data quality monitoring and correct issues to ensure completeness and accuracy.
• Lead the IT Risk Control and Self Assessment (RCSA) and complete in Insight.
• Complete the Risk Maturity Self-Assessment.
• Maintain controls and lead semi-annual control testing efforts
• Track IT Major Incidents and follow-up actions, including incidents flagged for Problem Management.. Coordinate post-mortem reviews and lead monthly update meetings.
• Track P0 requests and review in monthly update meeting.
• Track and manage issues and incidents to ensure that evidence is submitted by the due dates set, which includes leading the monthly issue review meeting.
• Complete the quarterly Risk Appetite Statements.
• Coordinate QBE policy and minimum control standards (MCS) reviews.
• Participate in policy update meetings with QBE and socialize changes to NAU.
• Coordinate Access Revalidations including tracking results and tickets to completion.
• Participate in internal audits.
• Coordinate NAIC with US Map and agent surveys.
• NY DFS Attestation
• Monitor the UIT/Shadow IT register and provide monthly UIT updates.
• Coordinate penetration testing and track any issues created from the findings.
• Coordinate Due North scheduling.
• Prepare the DISO monthly presentation.
• Coordinate Application Attestation and report on the results.
• Complete Supplier and SAQ reviews.
• Provide training to employees on risk management responsibilities..
• Prepare Risk Management communications including IT Update newsletter articles.
• Support the 'Second Line of Defense' role by monitoring business unit risk management activities.
• Maintain a strong network with risk professionals internally and externally.
• Identify and escalate relevant trends or changes in the external environment.
• Meet deadlines for stakeholder requirements and respond to ad-hoc requests promptly.

Necessary Work Experience includes:

• Some relevant risk management work experience, preferably within Information Technology.

Preferred Work Experience includes:

• Insurance industry experience is preferred.
• Experience in delivering Risk Management services.
• Experience in Cyber Security or Information Technology.
• Experience in data analytics.
• Exposure to insurance or financial services in a similar role is preferred
• Knowledge
• General knowledge of risks, process flow, controls and outputs of an insurance operation
• Fundamental knowledge of data analysis, extraction and management techniques for insurance portfolios
• Fundamental knowledge in report template creation and design

Competencies/Skills:
Proficiency with reporting and visualization tools (e.g., Power BI, Tableau, etc)
Aptitude for understanding, administering and supporting systems
Strong analytical and problem-solving skills
Understanding of risk management concept and practices
Excellent communication skills to work effectively with cross-functional teams and business stakeholders
Capable of representing team of function in a range of internal forums
Ability to identify opportunities to improve processes
Ability to adapt to evolving technologies and trends in reporting

Necessary Qualifications include:

• College Degree or equivalent combination of education and work experience.

Preferred Qualifications include:

• Qualification in Risk Management.

QBE, a global insurance leader, is the proud parent company of NAU Country Insurance Company. NAU Country writes in 48 states and has nine locations nationwide. Together, we combine history, expertise, innovation, and a shared commitment to excellence to provide unparalleled insurance solutions to our customers and communities worldwide.

Compensation Package: The salary range for this role is provided above. This is the national range for location(s) listed. The salary offer will be decided based on the role's complexity, its location, and the candidate's professional background, including their education and experience. Beyond the base salary, regular full-time and part-time employees will also be eligible for QBE's annual discretionary bonus plan based on business and individual performance.We encourage all candidates to apply, even if their salary expectations fall outside of this range, as we are committed to finding the right fit for our team.

QBE Benefits: We offer a range of benefits to help provide holistic support for your work life, whatever your circumstances. As a QBE employee you will have access to:

• Hybrid Working - a mix of working from home and in the office
• 22 weeks of paid leave for family growth, with 12 weeks available to all parents on a gender-equal basis
• Competitive 401(k) program with company match up to 8%
• Well-being program including holistic wellbeing coaching, gym membership, confidential counselling, financial and legal advice
• Tuition Reimbursement for professional certifications, and continuing education
• Employee Network and Community - QBE actively supports six Employee Networks, and many ways to give back to your community

To learn more, click here: Benefits | QBE US.

Why QBE? What if you could have a positive impact - at work and in the world?

At QBE, we're enabling a more resilient future - for our customers, communities, environment, and for our people. We're building momentum to achieve something significant and know our people are at the center of our success.

Our industry offers interesting and varied careers where you can help people to protect what matters most. As part of the QBE team, you'll get to spend every day working with people who are passionate, talented and kind. And our international scale means we're big enough for your ambitions, yet small enough for you to make a real impact.

Join us now, so you can be part of our success - and we can be part of yours!

https://www.linkedin.com/company/qbe-north-america/

Commitment to Diversity

QBE is committed to providing reasonable accommodation to, among others, individuals with disabilities and disabled veterans. If you need an accommodation because of a disability to search and apply for a career opportunity with QBE, please inform our Talent Acquisition team to let us know the nature of your accommodation request and your contact information.

Equal Employment Opportunity:

QBE provides equal employment opportunities to applicants and employees without regard to race; color; gender; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; protected veteran status; or disability or any other legally protected status.

Supplementary information

Skills:

How to Apply:

To submit your application, click "Apply" and follow the step by step process.

Equal Employment Opportunity:

QBE is an equal opportunity employer and is required to comply with equal employment opportunity legislation in each jurisdiction it operates.