Principle, Technology Regulatory Governance

Company:Marsh

Description:

What can you expect?

This is a strategic role supporting the Global Technology Regulatory Leader in maturing, enhancing and connecting Marsh’s technology regulatory governance capabilities across Marsh businesses and legal entities globally.

The role will support Marsh businesses in demonstrating and evidencing that they are effectively governing their technology services and service provider arrangements, and in doing so are meeting relevant client, legal and regulatory obligations. The initial priority will be Germany and other in-scope EU businesses, including obligations arising under DORA and broader requirements relating to executive and board oversight and challenge. The role will also support obligations in other jurisdictions, including Australia under CPS 234 and the United States, including relevant NYDFS requirements, while helping shape a more coherent and scalable governance, reporting and evidencing model over time.

The role holder will help inform decision-making through regulatory analysis, governance design, reporting, evidencing and stakeholder coordination, working closely with the Global Technology Regulatory Leader on priorities, direction and delivery.

The role requires strong engagement across technology, risk, compliance, legal and business teams to bring greater structure, clarity and consistency to existing governance and reporting capabilities, ensuring obligations are translated into practical outcomes, required evidence can be produced for management bodies, and stakeholders understand what is being delivered, why it is required and what assurance it provides.

This is a hybrid role. The successful candidate will be expected to attend the office as required, while also having flexibility to work from home in line with Marsh policy.

 We will count on you to:

• Support the Global Technology Regulatory Leader in maturing and strengthening Marsh’s technology regulatory governance capabilities across Marsh businesses and legal entities globally.
• Review and interpret applicable client, legal and regulatory obligations and provide guidance to business leaders, technology stakeholders and control functions on standards, expectations and evidencing requirements.
• Develop analysis, recommendations and governance outputs that help inform decision-making, prioritisation and oversight.
• Design and enhance governance, reporting and evidencing approaches that enable executive and board oversight and challenge of technology services, service providers and associated controls.
• Assess current reporting, governance processes and control evidence to determine whether they are sufficient, connected and fit for purpose to support effective business governance and compliance obligations.
• Identify gaps, duplication and ambiguity in reporting, governance and evidencing capability, and drive remediation through clear ownership, timelines and escalation.
• Develop reporting and management information for business leaders, committees and boards to support oversight of obligations, risk exposure and control effectiveness.
• Partner with stakeholders across technology, risk, compliance, legal, operations and the business to align on requirements, responsibilities and delivery priorities.
• Uplift and embed repeatable governance and evidencing processes across in-scope businesses and entities, reducing reliance on fragmented or manual approaches.
• Contribute to the development of scalable governance and reporting approaches that support obligations across jurisdictions, including DORA, CPS 234 and relevant US regulatory requirements such as NYDFS.
• Provide practical advice to key stakeholders on meeting client, legal and regulatory obligations through pragmatic, fit-for-purpose governance solutions.
• Escalate issues, delivery risks and decision points appropriately to support timely direction and intervention where needed.

What you need to have:

• Relevant undergraduate qualification combined with significant experience in financial services, technology governance, technology risk, regulatory oversight, operational resilience or a related discipline.
• Strong experience in regulated environments, translating regulatory or policy requirements into practical governance, reporting and control-evidencing outcomes.
• Experience in technology governance, information security, risk management, operational resilience, compliance or audit.
• Strong understanding of governance frameworks, control environments and evidencing requirements.
• Experience assessing reporting, governance processes and control evidence for adequacy, effectiveness and fitness for purpose.
• Advanced communication skills with demonstrated ability to engage, influence and present recommendations to senior stakeholders, including executives, committees and boards.
• Confidence in working with senior business and technology stakeholders to deliver pragmatic and effective governance solutions.
• Strong stakeholder management skills, with the ability to coordinate activity across multiple teams, owners and dependencies.
• Personal drive to achieve required outcomes within specified timeframes and escalate issues appropriately where intervention is needed.

What makes you stand out:

• Experience supporting or implementing DORA-related governance, reporting or oversight requirements.
• Familiarity with regulatory obligations relevant to technology governance, including DORA, GDPR, EAA, the EU AI Act, CPS 234 and NYDFS-related requirements.
• Experience supporting board, committee or management body reporting in a regulated environment.
• Familiarity with service provider oversight, outsourcing governance and control assurance.
• Experience operating across multiple legal entities, businesses and jurisdictions.
• A track record of delivering regulatory governance priorities in line with plan and within agreed timelines.
• Experience enabling businesses or legal entities to evidence compliance with technology-related regulatory, legal and client obligations.
• Demonstrated ability to improve the quality, consistency and repeatability of board and executive oversight materials.
• Experience identifying governance, reporting and evidence gaps and driving them through to closure.
• Ability to improve the traceability and defensibility of technology regulatory evidence.
• Strong stakeholder coordination skills, including timely escalation of risks, blockers and decision points.
• Experience developing repeatable governance and reporting approaches that can scale across entities and jurisdictions.
• Relevant postgraduate and/or professional qualifications.
• Relevant technical, risk or security certifications.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.

Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, Traveller community, or any other characteristic protected by applicable law. We are an equal opportunities employer. We are committed to providing reasonable support to any candidate with a disability/health condition to allow them to fully participate in the recruitment process. We welcome candidates to contact us at [email protected] to discuss any specific needs.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.