Director of Technology Risk and Governance

Intact Insurance; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Annual discretionary bonus

Hybrid working

25 days annual leave + bank holidays +

Health & wellbeing + virtual GP

Career development and mentoring

Inclusive culture + employee networks

Share investment options

Job summary

Intact Insurance in London is seeking a Director of Technology Risk and Governance to lead the risk appetite framework, oversee technology controls and ensure regulatory compliance across SOX, NI 52-109, and IT general controls.

You will shape the risk and governance agenda, provide reporting to executives and boards, develop your team, and collaborate with regulators and international stakeholders to drive effective risk management and resilient outcomes.

Qualifications

• Experience in technology risk, cyber security, governance and controls in regulated financial services.
• Expertise in COBIT, NIST, ITIL and related control frameworks.
• Proven ability to lead teams and collaborate with senior leaders, audit and regulators.
• Strong knowledge of SOX, NI 52-109, IT General Controls and automated controls.
• Excellent communication to executive, board and regulatory audiences.
• IRM, CISM or CISA qualifications.

Responsibilities

• Leading development, implementation and operation of the IT Risk Appetite Framework across the organisation.
• Driving the technology risk and governance agenda, identifying risks and strengthening controls.
• Providing strategic oversight of enterprise technology controls including SOX, NI 52-109, and ITGCs.
• Producing clear, insightful technology risk and governance reporting for executives, boards, regulators.
• Overseeing policy management, audit activity and third-party cyber assurance.
• Inspiring and developing the team, fostering a collaborative, transparent culture.

Skills

Technology risk governance

Cyber security governance

Risk frameworks

SOX & NI 52-109

IT General Controls

Stakeholder management

Executive communication

IRM/CISM/CISA qualifications

Job description

Director of Technology Risk and Governance

Job reference: UK003801

Location: London

Business area: IS & Change

Shape the future

We're leading a transformation in insurance helping people, businesses and society prosper in good times and be resilient in bad times. When you join us, you're not just taking a job, you're stepping into a career where you can make a real difference.

Grow with us

We're customer-driven, community-focused, and committed to helping our people grow. Whether you're early in your journey or bringing years of experience, we'll support you with the tools, flexibility, and opportunities to thrive.

Win as a team

Join a role where your work helps protect customers, strengthen confidence in technology and cyber security, and support resilient business outcomes across Intact UK, Ireland and Europe. You will shape technology risk and governance, influence senior decision making, and lead a talented team while working closely with colleagues, regulators, and international stakeholders to drive effective risk management and control.

You’ll make an impact by

• Leading the development, implementation and operation of the IT Risk Appetite Framework, ensuring technology and cyber risks are understood, managed and reported within agreed risk appetite.
• Driving the technology risk and governance agenda across the organisation, helping to identify risks, strengthen controls and support continuous improvement.
• Providing strategic oversight of enterprise technology controls, supporting SOX 404, ICFR, PCI DSS and NI 52-109 compliance requirements.
• Producing clear and insightful technology risk, cyber security and governance reporting for executive and board level committees, regulators and senior stakeholders.
• Overseeing policy management, audit activity and third party cyber assurance, ensuring effective governance and timely remediation of identified actions.
• Inspiring and developing your team, fostering an open culture that encourages collaboration, transparent disclosure and positive customer outcomes.

Your skills and experience

• Demonstrable experience in technology risk, cyber security, governance and controls management within a regulated financial services environment.
• Expertise across risk and control frameworks, including areas such as Information Technology, Change Management, Information Security, COBIT, NIST or ITIL.
• Proven ability to lead teams and collaborate across complex stakeholder groups, including senior leaders, audit, risk, compliance and regulatory bodies.
• Strong understanding of technology control programmes, including SOX, NI 52-109, IT General Controls and automated application controls.
• Excellent communication skills with the ability to present complex risk and control information clearly to executive, board and regulatory audiences.
• Relevant professional qualifications such as IRM, CISM or CISA, combined with sound judgement, integrity and a practical approach to problem solving.

Why you'll love it here

Being part of our team means you'll have the support and freedom to bring your best self to work each day. As a permanent member, here's what you can look forward to

• Annual discretionary bonus
• Up to 11% pension contributions
• Hybrid working
• 25 days annual leave + bank holidays + buy/sell options
• Health & wellbeing + virtual GP
• Career development and mentoring
• Inclusive culture + employee networks
• Share investment options

Our DEI commitment

We celebrate individuality and believe our differences make us stronger. We're proud to foster a culture where everyone feels respected, valued, and empowered to thrive. As an Equal Opportunity and Disability Confident Employer, we ensure fair consideration for all applicants and offer interviews to all disabled candidates who meet the essential criteria. We understand that everyone's circumstances are different and are happy to explore flexible working options such as reduced hours or job shares to support work-life balance. If you meet the core criteria but not every requirement, we'd still love to hear from you. Let's explore how this role could support your next career step. If you need adjustments during the recruitment process, just let us know we're here to support you.