Senior Associate – Information Security

This role will directly support the Global Information and Cyber Security (ICS) Group within WTW. You will use your skills and experience to support ICS team, delivering technology and cyber regulatory engagements. Working closely with the wider ICS teams and their subject matter experts, further engagement will be across WTW which may include Technology, Business Operations, Internal Audit, Compliance, Risk, Privacy and legal.

You will support and monitor remediation activities where gaps have been identified across multiple regulated environments as applies to Information and Cyber Security and IT regulatory related requirements. You will be familiar with different industry standards and best practices for Information and Cyber Security. Strong communication skills is a requirement as a supportive team player, resourceful, independent and adaptive to change.

The Role:

This role will support the delivery of Global Information and Cybersecurity (ICS) regulatory requirements. The responsibilities of this role will include:

• Execution of regulatory deliverables, Request for Information (RFIs), Audits and Regulatory questionnaire submissions with a focus on ICS & Technology Risk within a specified time and schedule.
• Define communications (planning, scoping, issues) engagement with stakeholders (regulators, control owners, senior management) related to regulatory deliverables, RFIs, audits and Regulatory questionnaire submissions.
• Engage with ICS Policies and Standard team to map ICS and Technology standards to the regulatory requirements.
• Co-ordinating and developing high quality and timely responses to requests for information, ensuring consistency and leveraging evidence where possible.
• Engage with the ICS controls testing team where application controls testing is required. Furthermore, support and monitor identified issues and gaps.
• Support manage and monitor identification and remediation of issue and gaps in line with WTW controls and regulatory requirements.
• Engage with ICS Risk Team to ensure that the identified risks are reported and managed in line with the risk processes.
• Support management reporting specifically around engagement status and issue management.
• Supporting wider team throughout the regulatory engagements.
• Contribute to the creation of and delivery of presentations and briefings as required for the key stakeholders.
• Generating reports for technical and non-technical stakeholders, including the creation of documentation.
• Understanding wider ICS functions and better understanding their Roles and Responsibilities to support our delivery.

Cross-Functional Collaboration:

• Collaborate with other regulatory compliance functions – e.g. Audit, Compliance, and Privacy, tech partners – to track compliance across the organization and pool expertise on vague or complex regulatory requirements.
• Work with business units to ensure controls are effective and appropriately address to the relevant regulatory requirements they address.
• Facilitate in attesting and demonstrating compliance with relevant authorities, regulators and auditors during compliance assessment and/or audits.

Technology and Cybersecurity Regulatory Engagements Programs

• Collaborate in the developing and shaping Regulatory engagement operating model and standard processes.
• Devise and upkeep templates and tools to assist in implementing various ICS Regulatory Engagement programs and reporting.
• Supporting the implementation, alignment to, maintenance and monitoring of controls following Information Security standard and framework.