IT Risk & Controls Manager

Team: Information Security
Work Arrangement: Hybrid - 2 days per week based in our Bournemouth office but we are open to discussing flexible working arrangements with our London office
Hours: Full-time, 35 hours per week

This exciting position plays a key role in shaping and overseeing the IT risk and control framework within Technology. You'll champion a proactive approach to risk, promoting awareness and accountability throughout the tech teams. In this role, you'll drive IT risk initiatives, deliver regular insights to senior stakeholders, and oversee audits, general controls, and risk assessments. Collaboration is crucial - you'll work closely with Information Security, Group Risk, and both internal and external audit teams. You'll also support policy alignment, evaluate control effectiveness, and advise on enhancements to risk controls.

• 
  Develop, implement, and manage the IT Risk Management Framework
• 
  Maintain an up-to-date IT Risk Register
• 
  Oversee the creation and tracking of risk mitigation plans
• 
  Provide clear, regular risk updates to IT leadership
• 
  Foster a risk-aware mindset across all areas of Technology
• 
  Assess and recommend investments to reduce identified IT risks
• 
  Track and resolve IT risk incidents, ensuring timely closure
• 
  Monitor for emerging IT risks and incorporate them into planning and decision-making
• 
  Liaise with Group Risk, Audit, and Compliance to ensure IT risks are aligned with company-wide risk appetite
• 
  Offer practical, cost-effective solutions for mitigating identified risks
• 
  Support the development and implementation of risk policies, standards, and procedures
• 
  Lead quarterly IT risk assessments
• 
  Engage in comprehensive risk remediation planning and monitoring
• 
  Coordinate internal and external IT audits, ensuring strong collaboration with auditors
• 
  Oversee an ongoing Controls Assurance program focused on IT General Controls
• 
  Plan and manage Disaster Recovery exercises, analyzing and reporting on outcomes

• 
  Familiarity with frameworks like ITIL, ISO27001, NIST CSF, and Disaster Recovery planning
• 
  Strong interpersonal and communication skills
• 
  Ability to manage time effectively and juggle multiple priorities
• 
  Proficiency with Microsoft Office tools and data reporting
• 
  Hands-on experience with IT risk management tools and systems
• 
  Ability to build, implement, and train users on risk management platforms

• 
  Performance Bonuses - Be recognized and rewarded for your hard work

Generous Pension - We'll match your contributions up to 6%, with potential to reach 12%

• ???????Health Insurance - Enjoy access to our award-winning health plan plus rewards
• 
  Life Assurance - Protection for you and your loved ones, worth 4x your annual salary