Hybrid Senior IT Risk & Controls Leader

Ageas UK; Chandler's Ford; Hybrid; GBP 59,000 - 89,000; Full time

Benefits offered by this job

Flexible Working

Health Insurance

Pension Scheme

Annual Bonus

Well Being

Job summary

Ageas UK is seeking an experienced IT Risks & Control Manager to lead risk identification, assessment, and reporting across the organisation. You will own the IT risk register, facilitate senior discussions, and deliver high-quality governance reporting in a second-line risk role.

You will work within the Governance, Risk and Compliance team, partnering with technology stakeholders to implement proportionate controls and support internal and external audits. Hybrid role in the UK.

Qualifications

• Experience in IT risk management or information security risk.
• Knowledge of IT control frameworks, ISO/IEC 27001 and NIST-aligned controls.
• Experience maintaining IT risk registers and working with GRC tools.
• Ability to facilitate senior stakeholder discussions and governance meetings.
• Ability to translate technical risk into clear, decision-ready insight.

Responsibilities

• Lead IT risk and control assessments using recognised frameworks.
• Own and maintain the IT risk register with current risks, controls and treatment plans.
• Assess design/effectiveness of IT controls and manage remediation, acceptance or escalation of risks.
• Facilitate IT risk meetings with senior technology leaders and provide insights for governance.
• Produce risk reporting covering trends, controls and issues for governance forums.
• Support audits by providing evidence aligned to control frameworks.
• Coordinate with Security Architecture, Engineering and Operations to ensure effective controls.

Skills

IT risk management

IT risk

GRC tools

ISO 27001

NIST-aligned controls

stakeholder facilitation

risk reporting

Job description

Ageas UK is seeking an experienced IT Risks & Control Manager to lead risk identification, assessment, and reporting across the organisation. You will own the IT risk register, facilitate senior discussions, and deliver high-quality governance reporting in a second-line risk role.

You will work within the Governance, Risk and Compliance team, partnering with technology stakeholders to implement proportionate controls and support internal and external audits. Hybrid role in the UK.