Technology Compliance Analyst

Role Title: Technology Compliance Analyst

What is this job really like

Reporting to the Head of Operational & Technical Resilience the Technology Compliance Analyst is responsible for the development, maintenance and operation of a Technology Compliance Management System which has been designed to:

• Enable the technology function to comply with both its policy and regulatory obligations.
• Ensure the business knows its compliance position at all times with respect to those in-scope regulated instruments and policies as they pertain to the Office of the CIO.

As part of the First Line of Defence, this function provides technology management with a near real time view on the compliance posture of the function as it relates the policy and regulatory obligations. In turn this provides assurance to the Intact Executive, Board and Regulator regarding the effectiveness of controls and processes in place to manage compliance and secure our licence to operate in Ireland.

Regulatory compliance within the financial services sector continues to evolve and grow in scope. The Cross Industry Guidance on Operational Resilience, Cross Industry Guidance on Outsourcing (where the ITS function has responsibilities) and now (EU) 2024/2554 Digital Operational Resilience Act have also contributed to the compliance overhead. The successful candidate will assess the appropriateness of the changes introduced to comply with these regulatory structures to ensure they are achieving the regulated prescribed outcomes.

Responsibilities

Situational Readiness Posture

• Annual compliance planning and scheduling with business owners.
• Support for the response to Central Bank of Ireland Core Risk Assessments.
• Management of compliance registers and business owner deliverables.
• Providing well informed recommendations for improving processes working in close collaboration with 1LOD and 2LOD.
• Maintenance and management of the (EU) 2022/2554 DORA Register of Information and its submission to the Regulator as required.
• Control owner for the IT Risk Management Framework and drafting and publication of the annual IT Risk Management Framework Report.
• Monitoring and implementation of DORA related changes on an ongoing basis.
• Integration of European Supervisory Authority DORA related changes into the compliance registers and implementation and management with business owners.
• Risk management experience to track non-compliances and their processing through to compliance.
• Providing management information on the compliance posture of the technology function.
• Contributing to compliance processes by identifying opportunities for improved adherence to regulatory and policy requirements.
• Validating compliance evidence in line with agreed processes.
• Assist with internal reporting.
• Delivery of Technology Compliance training to stakeholders as it relates to the in-scope activities for this role.
• Ensure compliance operational requirements are embedded in SME processes.
• Stay abreast of the evolving regulatory landscape as it relates to those regulated instruments with an impact on the Office of the CIO.

Other

• From a stakeholder collaboration perspective work closely with technology functions to ensure a holistic and integrated approach to compliance adherence and management reporting.
• Administer and support group-wide compliance tools, including configuration and system support.

Competencies

• Proven experience of delivering regulatory change and alignment within financial services.
• Experience of interpreting policies or regulations and creating / or augmenting a compliance management system that is proportionate and sustainable on an enduring basis.
• An understanding of modern governance, risk and control frameworks, including the Three Lines of Defence.
• Comfortable dealing with and challenging senior stakeholders.
• Strong networking and senior stakeholder management skills and ability to negotiate and influence effectively.
• Maintains an up-to-date understanding of industry best practices and the regulatory landscape.
• Experience with understanding and translating complex regulatory requirements in a fast-paced, evolving environment.
• Inspiring and engages with teams to make change happen.
• Continuous improvement mind-set; challenges the status quo and seeks self-improvement.

Preferred experience / exposure

• (EU) 2022/2554 DORA Register of Information implementation
• Compliance management systems or tools implementation such as Decision Focus.