Jobs and Careers

Sr. Governance Analyst

United Statesfull_timeVerifiedPosted 3 Jun 2024

About the role

What part will you play? If you’re looking for a place where you can make a meaningful difference, you’ve found it. Because, at Markel, the work you do gives people the confidence to move forward and seize opportunities. Whether you’re wild about horses, bananas for boats or driven by data, you’ll find your fit amongst our global community of optimists and problem-solvers. We’re always pushing each other to go further because we believe that when we realize our potential, we can help others reach theirs.
Join us and play your part in something special!

Markel is seeking a Senior IT Governance Analyst who will help lead the effort to ensure that all key Global IT processes and system controls are well-designed, promote transparency and enable continuous improvement. The IT GRC team is a Line 1 Risk Defense team that supports IT service owners and IT leadership around the world. The IT GRC team also regularly interacts with Enterprise Risk Management, Internal Audit, and Global Security.This position will be responsible for helping to enhance the IT GRC framework and procedures to help IT maintain an effective control environment, and to continue to foster a risk-aware culture. This will be demonstrated by measurable outcomes showing improvement in the overall quality of operational effectiveness through consistent and quantifiable processes, and improved IT staff awareness and expertise of their risk and control environment.

Risk Assessment and Management

Perform risk assessments according to the IT GRC plan and procedures. This requires being willing to ask provocative questions and use analytical skill to analyze potential residual risk.
Perform Project risk guidance to ensure projects have considered applicable risks. Assist project and support teams in identifying, implementing, and documenting internal controls to support new services as a part of go live readiness.
Execute ad-hoc risk analysis on urgent areas of concern. This often requires working across multiple areas within the company to evaluate the risk, root-cause, and potential solutions.
Uses consistent processes for identifying potential risk events, quantifying, and documenting the probability of occurrence and the impact on the business.
Collects and collates evidence as part of a formally conducted and planned review of activities, processes, products or service. Examines records as part of specified testing strategies for evidence of compliance with management directives, or the identification of abnormal occurrences.
Refers to domain experts for guidance on specialized areas of risk, such as architecture and environment.
Coordinates the development of countermeasures and contingency plans.

Quality Management and Audit

Advises on the application of appropriate quality management techniques and standards.
Ensures that projects, teams, and functions have appropriate practices in place and are meeting required organizational quality levels.
Determines areas where existing processes should change from analyzing audit findings.
Takes responsibility for controlling, updating, and distributing organizational standards.
Facilitates improvements to processes by changing approaches and working practices, typically using recognized models.
Provides advice and guidance in the use of organizational standards. Performs quality assurance reviews of suppliers and throughout the supply chain.

Conducts formal audits or reviews to ensure compliance with organizational standards for activities, processes, data, products, or services.
Leverages experience to drive improvements to the overall quality of operational effectiveness through repeatable, measurable processes.

Governance Processes and Reporting

Provides guidance and suggestions for improved governance processes to achieve strategic operational objectives.
For projects, development, or support activities; plans, organizes, and conducts audits and determines whether appropriate quality control has been applied.
Assists in the development of new or improved practices and organization processes or standard. Facilitates localized improvements to the quality of system or services.
Develop or enhance policies and related procedures for evaluating risk, establishing, and maintaining an effective system of internal control.
Collates, collects, and examines records, analyses the evidence, and drafts all or part of formal compliance reports.
Determines the risks associated with findings and non-compliance and proposes corrective actions.