Information Security Risk Manager

Telefonica Tech; Cambridge; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading technology company is seeking an experienced IS Risk Manager to lead the technology risk management function. This role involves developing risk frameworks, providing expert guidance, and improving risk processes in a remote-first setup with occasional onsite engagements. Ideal candidates will have a strong background in risk management within complex organizations and experience in critical infrastructure environments.

Qualifications

• Strong background in complex IT/IS risk management.
• Experience in developing and implementing governance frameworks.
• Confident communicator with both technical and non-technical audiences.

Responsibilities

• Lead and develop the IS/IT/OT Risk Management framework.
• Provide expert risk assessment and guidance across IS functions.
• Drive continual improvement of risk processes and policies.
• Embed a strong risk culture through training and engagement.

Skills

IT/IS risk management

ISO 31000 knowledge

Agile/Prince2

Influencing senior stakeholders

Communication with technical audience

Critical National Infrastructure experience

Job description

IS Risk Manager - Contract (Inside IR35)

3-month contract (likely extension) / East Midlands / Mainly remote with occasional onsite

Telefónica Tech is looking for an experienced IS Risk Manager to lead and mature the technology risk management function for our key Customer. This is a key role overseeing IT and OT risk across a large, complex digital estate, ensuring alignment with business objectives, regulatory requirements and ongoing transformation programmes.

Role Overview

You’ll own and drive the Risk Management framework within the IS department, embedding a strong risk culture, improving processes, and ensuring technology risks are effectively identified, assessed, and governed. Working closely with the Group CISO, leadership teams and technical stakeholders, you’ll provide expert guidance, steer risk remediation, and ensure consistent governance across the organisation.

Key Responsibilities

• Lead and develop the IS/IT/OT Risk Management framework and associated governance.
• Provide expert risk assessment, analysis and guidance across all IS functions.
• Track and report risk metrics, KPIs/KRIs, and progress against remediation plans.
• Drive continual improvement of risk processes, policies and awareness.
• Embed a strong risk culture through training, education, and stakeholder engagement.
• Represent risk at committees and senior governance forums.
• Ensure risks are escalated, managed and aligned with wider enterprise risk activity.

Qualifications

Feel that you don’t match the job description 100%, but would still be a great fit for role, please get in touch.

Skills & Experience

• Strong background in IT/IS risk management within complex organisations.
• Knowledge of frameworks such as ISO 31000, ITIL, and structured PM environments (Agile/Prince2).
• Experience developing and implementing Risk Management frameworks and governance.
• Skilled at influencing senior stakeholders and driving risk mitigation.
• Confident communicator able to engage both technical and non-technical audiences.
• Experience in Critical National Infrastructure (Utilities) and OT environments essential.

Additional Information

Contract Details

• Inside IR35
• 3-month contract with extension potential
• East Midlands based, remote-first (some onsite time for onboarding)

At Telefónica Tech, we believe inclusion is the bridge that empowers everyone to be their authentic selves. We celebrate and respect our differences because diversity drives innovation and makes us stronger.

Be yourself with us, and feel that you belong.

We welcome applicants from all backgrounds and identities regardless of age, disability, gender reassignment, marital or civil partnership status, pregnancy or maternity, race, religion or belief, sex, and sexual orientation.

We are also committed to equity, accessible hiring practices, and creating an inclusive culture through many means including TogetHer (Women's network) and our Employee Resource Groups which include Diversity and Inclusion, Telefónica Tech Pride, Neurodiversity, ELEVATE (African and Caribbean heritage network), and Sustainability.