IT Risk

**IT Risk & Compliance Manager**:
**What can you expect?**

As the IT Risk & Compliance Manager, you will be entrusted with leading the Risk and Compliance function within Technology. Working closely with the business and stakeholders, you will spearhead the delivery of integrated strategies for managing risk, control, and regulatory compliance requirements. Your expertise will be instrumental in ensuring the business’ adherence to industry standards and best practices.

**What is in it for you?**

At Mercer, we recognise that our most important asset is our people. We offer a great team environment with energetic and supportive colleagues as well as programs that support career development to support and nurture you with every opportunity to reach your full potential.

We recognise the value of healthy, happy colleagues and promote a culture of care and wellbeing, offering a competitive range of health, wealth and lifestyle benefits which include:

- Corporate health insurance subsidy
- Flexible salary packaging
- Discounted insurances
- Employee Assistance Program
- Flexible working arrangements
- Community Volunteer and Study Leave

**We will count on you to**:

- Lead the Risk and Compliance function within Technology, collaborating with the business and stakeholders to deliver integrated ways for managing risk, control, and regulatory compliance requirements
- Optomise and manage the comprehensive IT Risk and Compliance framework in line with operational frameworks to support ambitious growth plans
- Balance business expectations with best practices for technology risk, managing the IT risk register, and implementing robust mitigation plans
- Ensure adherence to legal and industry compliance standards, proactively identifying opportunities for improvement in our control framework
- Collaborate with internal and external auditors, acting as a key interface into wider technology teams, and ensuring prompt remediation of any findings
- Provide valuable risk and security insights, offering a forward-looking view of risk for Technology
- Review and produce required reporting to comply with internal and external obligations
- Establish and oversee projects and programs of work, fostering a collaborative environment to achieve objectives
- Consult, provide expert advice, and guidance to enable Technology to manage risk, compliance, and security effectively
- Communicate with internal and external stakeholders, delivering timely updates, information, and advice on key risk, compliance, and security issues within the technology and financial services industry

**What you need to have**:

- Degree in Information Systems or equivalent
- Demonstrate a minimum of 5 years' experience in a similar technology risk role
- Autonomous, strong decision-making skills and the ability to identify risks and provide pragmatic solutions
- Possess a comprehensive understanding of relevant regulatory requirements and audit and assurance processes, including various auditing standards
- Showcase exceptional analytical skills to collect, analyse, and interpret information and data into valuable insights
- Possess excellent communication skills, both verbal and written, with the ability to initiate and lead conversations with Technology and Business leaders and risk colleagues

**What makes you stand out**:

- Professional qualifications in an area of IT Risk, e.g. CISA, CRISC, CGEIT

**Are you ready to join?**

Marsh McLennan is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh McLennan is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh McLennan colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.