Senior IT Cyber Governance, Risk & Compliance Analyst

Senior IT Cyber Governance, Risk & Compliance Analyst

London Contractor

On Site

The Fidelis Partnership is a leading privately-owned, Bermuda-based Managing General Underwriter, which, through its subsidiaries, is a global underwriter of property, bespoke and specialty insurance and reinsurance products. The Fidelis Partnership is one of the largest Managing General Underwriters globally and its operations also include outwards reinsurance, claims handling, exposure management and portfolio analytics. The Fidelis Partnership also sponsors and incubates specialist MGAs through its Pine Walk platform.

The Fidelis Partnership is separately owned and managed from the ownership and management of Fidelis Insurance Group.

Across product lines and geographies, we focus on three diversified pillars: reinsurance, specialty and bespoke solutions. We are truly diversified. Our long-standing partnerships with capital providers and quota share partners make us nimble. Our breadth of expertise and capabilities deliver outstanding market returns.

The Senior IT Cyber Governance, Risk & Compliance Analyst will support the development, implementation and oversight of the organisation’s IT governance, cyber risk and compliance activities. This role involves supporting IT and cyber risk assessments, compliance with relevant regulatory and control frameworks, audit activity, and the identification and tracking of vulnerabilities, control gaps and remediation actions across IT systems and processes.

The Senior IT Cyber Governance, Risk & Compliance Analyst will work closely with internal stakeholders to help ensure that IT and cyber activities are aligned with regulatory expectations, internal policies and good practice.

Compliance and

Risk Management:

• Support compliance with applicable regulatory, IT, cyber and control frameworks, which may include DORA, ISO 27001, NIST CSF, SOX and Cyber Essentials.
• Support the evaluation and management of IT, cyber, compliance and security risks across systems, processes and operations.
• Monitor emerging technology, cyber and operational resilience risks to support proactive risk management and timely escalation.
• Assist in preparing for and supporting regulatory inspections and internal, external and third-party audits.
• Support the tracking of cyber risk remediation actions, including actions arising from risk assessments, assurance reviews, incidents, audits, control reviews and control improvement initiatives.
• Support the maintenance of the cyber risk register, including the capture of risks, issues and remediation actions, and the preparation of updates for governance forums.
• Support third-party and supplier security assurance activities, including security due diligence, assessment of supplier responses and tracking of supplier remediation actions.
• Coordinate and evidence user access reviews and privileged access reviews with system owners and the business, supporting the move to tool-based access certification.
• Perform first-line compliance monitoring and control checks against information security policies and standards, including the tracking of policy exceptions.

Policy & Procedure Development:

• Support the development, implementation and updating of IT risk, cyber security and compliance policies, standards and procedures to ensure alignment with legal, regulatory, control and sound practice requirements.
• Maintain an up-to-date understanding of applicable regulatory requirements and help implement changes to comply with new or evolving regulations.
• Assist in developing and delivering internal training and awareness on IT governance, cyber risk and compliance topics.

Reporting & Communication:

• Support the preparation of cyber risk, control and…