Business Analyst – Office of the CIO, Risk & SMF 24 (6 Month FTC)

Role: Business Analyst – Office of the CIO, Risk & SMF 24 (6 Month FTC)

Location: London / Hybrid

Position: Full time, Fixed Term Contract

We are looking for an experienced Business Analyst to support the design and implementation of the future operating model for the Office of the CIO, with a particular focus on technology risk management, governance, controls and SMF24 compliance.

This is a hands-on transformation role requiring someone who can work across Technology, Risk and senior stakeholders to translate regulatory and risk-management requirements into a practical and sustainable operating model.

The role will help define how the Office of the CIO operates in BAU, including its governance structure, accountabilities, decision rights, risk and control processes, management information, committee framework and escalation routes.

The successful candidate will combine strong business analysis and target operating model experience with practical knowledge of technology/operational risk, governance and the Senior Managers & Certification Regime (SM&CR).

Operating Model & Governance

• Support the design of the target operating model for the Office of the CIO.
• Assess current governance, risk, control and reporting arrangements and identify gaps against the required future state.
• Define future-state capabilities, processes, roles, responsibilities, decision rights and operating procedures.
• Establish clear interfaces between Technology, the Office of the CIO, Risk, Compliance and other governance functions.
• Develop governance structures, committee arrangements and Terms of Reference, including membership, decision rights, escalation routes and reporting requirements.
• Support implementation and transition of the new operating model into BAU.

Risk Management & Controls

• Support the development of the CIO/Technology Risk Management Framework and associated standards.
• Define risk ownership, control ownership, risk processes and governance requirements.
• Develop clear accountability across Lines 1, 1.5 and 2, including RACIs and escalation routes.
• Review existing risk and control processes, identifying gaps, duplication and unclear accountability.
• Support the definition of risk identification, assessment, acceptance, monitoring and reporting processes.
• Ensure risk and control information is effectively incorporated into CIO governance and management reporting.

SMF24 & Regulatory Governance

• Translate SMF24 responsibilities and accountabilities into effective governance, processes, controls and management information.
• Map SMF24 accountabilities to governance forums, controls, decision rights and escalation routes.
• Develop responsibility and accountability mapping that demonstrates clear ownership and oversight.
• Support the establishment and mobilisation of governance forums required to support SMF24 responsibilities.
• Ensure the operating model supports appropriate governance evidence and demonstrable management oversight.

Business Analysis

• Facilitate workshops with Technology, Risk and senior stakeholders.
• Elicit, analyse and document business, governance and regulatory requirements.
• Produce current and future-state process maps, RACIs, capability models and operating model documentation.
• Perform gap and impact assessments.
• Translate complex risk, regulatory and technology concepts into clear, concise documentation.
• Develop options and recommendations to support senior management decisions.

We are looking for someone who can operate at the intersection of technology, risk, regulation and operating-model design.

You should be comfortable moving from high-level operating model discussions with senior stakeholders into the detail of processes, controls, RACIs, governance forums and management information.

Most importantly, you will bring a pragmatic mindset. The objective is not simply to document regulatory requirements, but to turn them into clear, workable governance and risk-management arrangements that can be embedded successfully into BAU.

• Strong Business Analyst experience within financial services or another highly regulated environment.
• Proven experience designing or implementing target operating models.
• Practical experience of technology risk, operational risk, governance and controls.
• Working knowledge of SM&CR, ideally including direct exposure to SMF24.
• Experience translating regulatory requirements into processes, controls, governance and accountabilities.
• Experience designing governance structures, Terms of Reference and committee arrangements.
• Strong understanding of the Three Lines model and the interaction between first and second-line risk functions.
• Experience creating process maps, RACI/accountability matrices, governance frameworks and control documentation.
• Strong workshop facilitation, analytical and stakeholder-management skills.
• Excellent communication skills and confidence working with senior Technology and Risk stakeholders.
• Previous experience within an Office of the CIO, Technology Risk or CIO Governance function.
• Experience supporting an SMF24 holder or equivalent senior accountable executive.
• Experience developing executive or Board-level risk and governance reporting.
• Experience delivering governance or risk capabilities as part of a major transformation.
• Insurance or London Market experience.

We are stronger together because of our common interests and rich differences. You may be the strength we didn’t know we needed. Believe in yourself, and click apply today!

What Can You Expect From Us?

As well as a competitive base salary and performance related discretionary bonus, here is a link to our employee benefits - Benefits of working at MS Amlin | MS Amlin

Hybrid Working

At MS Amlin we operate a hybrid working model to empower our people with flexibility to blend where they work. We value collaboration and believe that we work better together, our teams typically do 3 days a week in the office.

MS Amlin is a leading (re)insurer and part of the global MS&AD Group, with operations across Lloyd’s of London, the Middle East, and Asia Pacific. With over 120 years of experience, we support businesses facing complex and demanding risks, providing continuity in an uncertain world. Our expertise covers Property, Casualty, Marine, Crisis Management, Natural Resources and Reinsurance, backed by strong underwriting capabilities and deep sector knowledge. At the core of our claims service is TRUST - Transparency, Responsiveness, Understanding, Solution-driven thinking, and Technical expertise. This defines how we manage claims and build lasting relationships.

DE&I at MS Amlin

We will build a workplace where all talent is welcomed, and everyone has the opportunity to influence how the business works. We have dedicated employee resource groups that support our Diversity, Equity, and Inclusion (DE&I) goals.

MS Amlin is proud to be one of the founding partners of Lloyd’s Inclusive Futures programme which aims to get more Black and ethnically diverse people into the insurance industry - supporting them all the way from the classroom to the boardroom. Visit this link (Inclusive Futures Impact Report) to find out more about the programme and its aims and achievements so far.