Technology Regulatory Governance Programme Specialist

Company:

Marsh

Description:

What can you expect?

Marsh is a global leader in insurance broking and risk management, serving clients in over 130 countries. Technology Regulatory Governance is a critical function within Marsh's Global Technology organisation, responsible for ensuring that Marsh's legal entities can evidence effective oversight of the technology controls that protect our clients, colleagues and the business, whether those controls are operated locally or delegated to internal or external service providers.

We're looking for an experienced governance and programme coordinator to support the Global Technology Regulatory Leader in building and running the global portfolio of work that strengthens legal-entity governance and oversight of technology controls. You'll bring structure, visibility and momentum to a complex, fast-moving regulatory agenda, starting with the immediate European requirements arising from DORA, including the specific requirements and deadline applicable in Germany, and developing an approach that scales globally as further entities and jurisdictions, including the UK and Australia, come into scope.

This is a high-visibility coordination role at the centre of Marsh's technology regulatory agenda, working closely with the Principal, Technology Regulatory Governance, and partnering across commercial leadership, technology, risk, compliance, legal and finance.

We will count on you to:

• Support the Global Technology Regulatory Leader by coordinating the global portfolio of work required to strengthen legal-entity governance and oversight of technology controls.
• Coordinate the design and delivery of governance reporting that enables legal entities to demonstrate effective oversight of controls operated locally and controls delegated to internal or external service providers.
• Maintain a clear and reliable view of the full delivery portfolio, ensuring that requirements, priorities, responsibilities, dependencies, decisions and risks are visible and actively managed.
• Coordinate the workstreams required to develop the reporting capability, from regulatory and governance research through reporting design, assessment of current capabilities, remediation of identified gaps and implementation across in-scope legal entities.
• Prioritise the immediate European requirements arising from DORA, including the specific requirements and external deadline applicable in Germany, while developing an approach that can scale globally as further entities and jurisdictions, including the UK and Australia, come into scope.
• Work closely with the Principal, Technology Regulatory Governance, and the Global Technology Regulatory Leader and stakeholders across commercial leadership, technology, risk, compliance, legal and finance to agree requirements, responsibilities, dependencies and delivery priorities.
• Establish and maintain the integrated programme plan, milestones, dependencies, actions, decisions and risk log. Follow up with accountable owners, identify slippage, resource constraints and emerging issues early, and escalate matters requiring leadership direction or intervention.
• Track remediation of gaps in governance reporting, control evidence and legal-entity oversight, ensuring that each action has a clear owner, target date and status. Accountable control, service and legal-entity owners remain responsible for completing and evidencing their actions.
• Coordinate the production and implementation of governance reports, ensuring that information about locally operated and delegated controls is complete, consistent, traceable and suitable for review and challenge by legal-entity leadership.
• Maintain clear and auditable documentation of reporting requirements, control responsibilities, service-provider delegations, decisions, approvals and supporting evidence, so that each legal entity can demonstrate what it oversees, how that oversight is exercised and why the reporting approach is appropriate.
• Triage correspondence relating to technology regulatory and governance matters on behalf of the Global Technology Regulatory Leader. Highlight matters requiring their judgement or direct attention and respond to routine correspondence only where Marsh's position is established and approved.
• Prepare concise, non-technical programme reporting for senior stakeholders, including the relevant European COO and other executive stakeholders, covering progress, upcoming milestones, material risks, remediation status, decisions required and recommended actions.
• Provide proactive day-to-day support to the Global Technology Regulatory Leader by anticipating upcoming decisions, presenting issues with clear options and recommendations, following through on agreed actions and escalating only those matters requiring their judgement or intervention.

What you need to have:

• Strong experience coordinating complex programmes or portfolios of work, ideally within a regulated financial services, insurance or technology risk environment
• Working knowledge of technology governance, risk and control frameworks, with awareness of regulatory regimes such as DORA, ICT risk management or operational resilience requirements
• Proven stakeholder management skills, with the confidence to work across commercial leadership, technology, risk, compliance, legal and finance, and to follow up and hold accountable owners to delivery commitments
• Strong organisational discipline, able to build and maintain integrated programme plans, milestones, dependency maps, RAID logs (risks, actions, issues, decisions) and tracking of remediation activity
• Excellent written and verbal communication skills, able to translate complex, technical or regulatory detail into concise, non-technical reporting for senior and executive stakeholders
• Sound judgement and discretion, able to triage correspondence and distinguish routine matters from those requiring leadership attention or escalation
• High attention to detail and comfort operating with ambiguity across a fast-evolving, multi-jurisdictional regulatory landscape

What makes you stand out:

• Direct experience with DORA or other EU/UK ICT risk, operational resilience or technology regulatory requirements
• Experience coordinating governance or control activity across multiple legal entities or jurisdictions, particularly Germany, the UK or Australia
• Background in technology risk, internal audit, control assurance or third-party/service-provider oversight
• Experience building a reporting capability from the ground up, covering research, design, gap assessment, remediation and implementation
• Familiarity with governance forums, risk and compliance committees, or technology architecture/dev councils
• A recognised programme or project management qualification (e.g. PMP, MSP, Agile/Scrum)

What makes this role different:

• You'll sit at the centre of Marsh's technology regulatory agenda, working directly with and representing the Global Technology Regulatory Leader.
• You'll shape how Marsh evidences governance and oversight of technology controls globally, starting with DORA in Europe and scaling worldwide.
• You'll build a capability from the ground up, including the reporting approach, the programme plan and the ways of working, rather than simply maintaining an existing process.
• You'll work across the full breadth of the business, engaging commercial leadership, technology, risk, compliance, legal and finance stakeholders.
• You'll have genuine influence: your tracking, escalations and recommendations directly shape the decisions senior leadership takes.

Why join our team:

• We help you be your best through professional development opportunities, interesting work and supportive leaders.
• We foster a vibrant and inclusive culture where you can collaborate with talented colleagues to create new solutions and have impact for colleagues, clients and communities.
• Our scale enables us to provide a range of career opportunities.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.

Marsh is committed to providing an inclusive work environment. We aim to attract and retain the best, most qualified people and value colleagues of all backgrounds, without regard to age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, Traveller community, or any other characteristic protected by applicable law. We are an equal opportunities employer. We are committed to providing reasonable support to any candidate with a disability/health condition to allow them to fully participate in the recruitment process. We welcome candidates to contact us at [email protected] to discuss any specific needs.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.