Assistant Vice President, Technology Risk

Fortitude Reinsurance Company Limited, invites applications for a Technology Risk Director. Fortitude Re, is a Class E and Class 4 licensed Bermuda liability-led reinsurer of legacy insurance portfolios complemented by sophisticated investment capabilities. The primary responsibility of the Technology Risk Director is to fulfill the second line risk management responsibility for Fortitude Re’s IT, Data and Technology related risk. This position reports to the Chief Risk Officer of Fortitude Re, and will be an important member of the Enterprise Risk Management team that is responsible for the review, challenge and support of the first line responsibility to identify, quantify, remediate and manage all risks of the organization from end-to-end. 

Responsibilities will include, but are not limited to:

• The design, continuous refinement and implementation of a robust risk management framework, in line with industry best practices and the policies and expectations of regulators related to technology, data and privacy.
• Enhanced risk identification and reporting of all risk associated with Technology risk. Quality, clear and transparent communication with management to keep them apprised of all material risks; trends in material risk positions and support compliance with risk policies.
• Challenge the effectiveness of controls and management of risk across the organization.
• Assist to establish and review the technology risk management policy, mechanism and tools of the Group with reference to policy and regulatory requirements.
• Assist and report on how the first line of defence applies technology risk management tools in identifying, assessing, monitoring and controlling technology risk, and provide guidance on necessary mitigation measures.
• Assist to prepare regular management reports on technology risk status of the Group.
• Assess the adequacy and effectiveness of the controls from technology risk perspectives during due diligence of new products/service propositions and incident handling, provide advisory and recommendation on new technology solution of IT initiatives.
• Support the implementation of IT policies, plans and procedures, and organizational structures designed to provide reasonable assurance that 1) the IT strategy is aligned with the achievement of business objectives 2) Undesired events are detected, prevented and corrected and 3) IT risks are managed appropriately
• Reports findings on IT risk exposures to senior executives, and recommends additional IT risk controls to ensure Fortitude Re adhered to best practice and regulatory requirements
• Partner with the Chief Risk Officer of Fortitude Re to support first-line risk management.

Position Requirements:

• Bachelor’s degree with a major in Information technology or a related discipline.
• At least 10 years re/insurance experience specializing in technology risk, ideally in a (re)insurance environment.
• An internationally recognized professional IT security certification, such as Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), or equivalent.
• Second line experience ideal but not required.
• Experience with cloud platforms Amazon Web Services or Microsoft Azure  is preferred.