Hybrid Technology Risk & Compliance Lead

Vermelo RPO; United Kingdom; Hybrid; GBP 75,000 - 95,000; Full time

Benefits offered by this job

25 days leave

Annual bonus

Private medical insurance

Life assurance 4x annual salary

Hybrid working

Modern offices

Job summary

Vermelo RPO is seeking a Technology Risk and Compliance Manager to shape and embed the organisation's technology risk strategy within the insurance sector. The role supports governance across technology delivery and business decisions, ensuring risk considerations are integrated.

You will drive risk identification, assessment and reporting, and partner with stakeholders to implement effective controls and risk mitigation in a hybrid working model with 2 days per week in offices across the UK.

Qualifications

• Experience in technology risk, IT risk management, or information security roles.
• Strong understanding of risk management frameworks and enterprise risk management principles.
• Strong ability to identify, assess, and prioritise risks based on likelihood and impact.
• Experience maintaining and analysing risk registers, metrics, and reporting.
• Ability to evaluate control effectiveness and residual risk.
• Strong communication skills, able to articulate risks in business-relevant terms.
• Ability to influence stakeholders and support risk-informed decision-making.

Responsibilities

• Identify, assess, and manage technology-related risks across infrastructure, applications, cloud services, and third-party providers.
• Maintain and operate the technology risk management framework with consistent risk identification, assessment and treatment.
• Ensure risks align with ERM processes and risk appetite.
• Track and manage risk registers, issues and remediation actions.
• Support governance with accurate and timely risk reporting.
• Develop risk metrics, KPIs, and KRIs.
• Escalate material risks through governance forums and committees.
• Document risk decisions, acceptances and mitigations.
• Support compliance with regulatory, legal and internal policies related to technology risk.
• Assess and manage risks with third-party technology providers.
• Provide expert advice to tech and business stakeholders on risk management.

Skills

Technology risk management

Information security

Risk assessment

Risk reporting

Stakeholder influence

Job description

Vermelo RPO is seeking a Technology Risk and Compliance Manager to shape and embed the organisation's technology risk strategy within the insurance sector. The role supports governance across technology delivery and business decisions, ensuring risk considerations are integrated.

You will drive risk identification, assessment and reporting, and partner with stakeholders to implement effective controls and risk mitigation in a hybrid working model with 2 days per week in offices across the UK.