Nz Risk

**Your Role**
You will assist in effectively managing third party risks in accordance with the standards defined within Chubb’s Third-Party Provider Policy (TPPP) and Third-Party Risk Management (TPRM) as well as providing compliance support, advice and ongoing maintenance and development of the Chubb risk and compliance framework in New Zealand, in accordance with regulatory, industry, legal and company standards and requirements.

You will also assist in creating, implementing, and managing the processes, workflows, governance model and technology platform components that comprise the TPRM Program; to ensure that effective controls are applied globally with Chubb to manage the risks associated with engaging with third parties. Additionally, you will also work with business and risk partners to ensure the TPPP and TPRM Program are aligned to business practices. You may also assist the wider Compliance and Risk team with other compliance related activities when required.

**Your Responsibilities**
**_Third Party Monitoring: _**
- Key contact point for the business when engaging a third party, managing the process from end-to-end (in liaison with other functions - Risk, Compliance, Legal, IT, Finance etc).
- Ensuring alignment and completeness of onboarding due diligence.
- Material outsourcing assessments (operational, reputational impacts, costs, ability to bring in-house or alternative if provider fails, potential losses, concentration risk of all services outsourced to provider. If material outsourcing, approvals through audit, business owner, board.
- Coordination and follow up of TPCR assessments.
- Identifying trends following the third-party monitoring and reviewing activity. Ensuring identifying triggers that require strengthening of controls, training, or other controls.
- Implement and manage processes and controls for third parties including but not limited to loss adjusters, health experts, travel support specialists.
- Assurance work for third party relationships, ensuring recordkeeping and standard of management information, monitoring and review activity meets the internal standard.
- Dealing directly with the third parties where there is insufficient capacity/ no relationship manager including management of broker attestation process/loss adjusters.
- Assist the business in preparation for annual third-party arrangement reviews and/or presentation to the third-party governance forum. Providing recommendations to improve controls.
- May also assist with the review of Incentives.

**_Compliance and other training: _**
- Participate in the development, implementation and monitoring of the Compliance Program.
- Enhance compliance management across the First Line of Defence through the maintenance of effective stakeholder relationships through advice and developing the knowledge of the First Line and compliance matters to drive a proactive compliance culture.
- Participate in the development, implementation and monitoring of a high-quality compliance training program to assist with the development of First Line understanding, awareness and accountability for compliance risks.
- Prepare and present face to face training on compliance matters to various business units and, where relevant, third party providers.
- Assist in Compliance Assurance Reviews (CAR) and monitoring tasks conducting targeted reviews on areas identified as being exposed to the risk of compliance breaches.
- Manage/oversee the Third Party onboarding due diligence requirements from a Compliance perspective.
- Assist to develop, maintain and monitor compliance obligation registers, business compliance profile, and compliance plans across the First Line.
- Assist with conducting impact analysis to the business arising from regulatory change and ensuring that relevant training is put in place around any implemented changes.
- Complete due diligence reviews on third parties and contribute to the third-party risk assessment, on-boarding and management process.
- Assist with the sanctions program including keeping up to date with relevant sanctions requirements.
- Support in the provision of compliance training, communication and guidance documents to employees.
- Assist to compile and report on compliance activities to the Enterprise Risk Committee, the Board Risk and Compliance Committee, Board Audit Committee, and Board Audit and Risk Committee.
- Work with other compliance team members, enterprise risk management, and internal audit to support and promote an effective Three Lines of Defence model.
- Maintain NZ Compliance Village resource.
- Policy governance including assists with the review, implementation, communication and training to NZ policies.
- Support the development of training programs.
- ICNZ Reporting
- collating relevant information from TPAs and internally to enable reporting.
- Assistance with Incident & Breach issues including investigation and reporting (if required)