Help identify and assess technology and information security risks across the business
Make sure risks are clearly understood and managed with strong, practical controls
Support teams to design and improve controls that reduce risk and protect services
Oversee control testing and make sure any gaps are addressed
Lead and track plans to fix control issues and improve how we manage risk
Build strong relationships with senior stakeholders, including CIOs and business leaders
Prepare clear, simple reports on risks and controls for senior committees
Monitor risk levels and control performance through dashboards and regular updates
Support incident planning and help teams respond to technology or service risks
Promote a strong risk-aware culture by offering guidance and training where needed

Experience managing IT risk and controls in a regulated environment (financial services experience is essential)
A good understanding of technology risks, including cloud services and modern IT environments
Experience designing, testing or reviewing IT controls
Knowledge of security frameworks such as ISO 27001, NIST or similar
Awareness of UK regulatory bodies (such as FCA, PRA, ICO or CQC)
Strong communication skills, with the ability to explain complex ideas in a simple way
Confidence working with senior stakeholders and influencing decisions
Experience in IT audit, assurance or risk roles (qualifications like CISM, CISA or CISSP are helpful but not essential)
The ability to stay organised and focused, even when working to tight deadlines.

25 days holiday, increasing through length of service, with option to buy or sell
Bupa health insurance as a benefit in kind
An enhanced pension plan and life insurance
Onsite gyms or local discounts where no onsite gym available
Various other benefits and online discounts

IT Risk and Control Manager

Key skills