Project and Innovation Risk Specialist at CIC Insurance

About the Role

Reporting to the Technology Risk and Cybersecurity Manager, the role holder will support in the identification, assessment, monitoring, and reporting of risks associated with projects, programmes, and innovation initiatives across CIC Insurance Group. The Project and Innovation Risk lead assists in ensuring that risk management is consistently applied throughout the project lifecycle and across the Group’s innovation agenda, in alignment with the enterprise risk management framework and applicable regulatory requirements. The incumbent will play a key role in helping the Group pursue innovation safely, ensuring that emerging risks from new technologies, digital initiatives, and business model changes are identified and managed proactively.

Key Responsibilities

• Maintain and update project and innovation risk registers across all active Group projects, programmes, and innovation initiatives, ensuring risks, causes, likelihood ratings, impact scores, and treatment actions are accurately documented and current.
• Conduct structured risk assessments for new and ongoing projects and innovation initiatives including new product development, insurtech partnerships, digital transformation programmes, and emerging technology adoption gathering information from project teams and stakeholders to identify threats and opportunities, ensuring risks are captured in the risk register, and preparing draft assessment reports for review by the Technology Risk and Cybersecurity Manager.
• Prepare regular risk reports, dashboards, and status updates for project steering committees, governance bodies, and senior management, translating risk data from both project and innovation workstreams into clear and concise management information.
• Support project and innovation monitoring activities by tracking the implementation of agreed risk treatment actions, following up with risk owners, and flagging overdue or escalating risks to the Cybersecurity Manager in a timely manner.
• Support data protection and privacy risk reviews for projects and innovation initiatives that involve personal data processing or new data-driven business models, assisting in maintaining compliance with applicable data protection legislation across the Group’s operating jurisdictions.
• Collate and analyze risk data across the Group’s project and innovation portfolio to assist in identifying trends, concentration risks, and emerging threats, producing summary analysis for management review.
• Support post-project and post-innovation risk reviews and lessons-learned exercises by gathering data, preparing summary reports, and documenting improvement recommendations for future initiatives.

General Responsibilities;

• Participate in planning and budgeting for the Risk and Compliance department.
• Participate in various meetings and governance committees as required.
• Plan, promote, and support internal training activities related to risk management practices, frameworks, and enhancements.

 Who We’re Looking For

Essential Knowledge/Skills and Experience Required:

• Bachelor’s degree in Business Administration, Project Management or a related field.
• Project Management Certification, i.e. PMP, PMI-ACP or PRINCE II and PROSCI Change Management Practitioner is desirable.
• At least 2- 4 years relevant experience in project Management and Change Management.
• Significant work experience with emphasis on System Implementations