Information Security Risk Manager

Telefónica Tech; Hartford; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading technology provider in the United Kingdom is looking for an experienced IS Risk Manager to oversee IT and OT risk management. This role involves leading the risk management framework, improving risk processes, and engaging with senior stakeholders to ensure effective governance. The ideal candidate should have a solid background in risk management, particularly within complex organizations, and experience in Critical National Infrastructure. Embrace a culture of inclusion and equality while driving innovation.

Qualifications

• Strong background in IT/IS risk management within complex organizations.
• Experience in Critical National Infrastructure (Utilities) and OT environments.
• Ability to engage technical and non-technical audiences.

Responsibilities

• Lead and develop the IS/IT/OT Risk Management framework.
• Track and report risk metrics, KPIs/KRIs and remediation progress.
• Drive continual improvement of risk processes and policies.

Skills

Risk assessment and analysis

Influencing senior stakeholders

Communication skills

Knowledge of ISO 31000 and ITIL

Job description

Telefónica Tech is looking for an experienced IS Risk Manager to lead and mature the technology risk management function for our key Customer. This is a key role overseeing IT and OT risk across a large, complex digital estate, ensuring alignment with business objectives, regulatory requirements and ongoing transformation programmes. You’ll own and drive the Risk Management framework within the IS department, embedding a strong risk culture, improving processes, and ensuring technology risks are effectively identified, assessed, and governed. Working closely with the Group CISO, leadership teams and technical stakeholders, you’ll provide expert guidance, steer risk remediation, and ensure consistent governance across the organisation.

• Lead and develop the IS/IT/OT Risk Management framework and associated governance.
• Provide expert risk assessment, analysis and guidance across all IS functions.
• Track and report risk metrics, KPIs/KRIs, and progress against remediation plans.
• Drive continual improvement of risk processes, policies and awareness.
• Embed a strong risk culture through training, education, and stakeholder engagement.
• Represent risk at committees and senior governance forums.
• Ensure risks are escalated, managed and aligned with wider enterprise risk activity.
• Strong background in IT/IS risk management within complex organisations.
• Knowledge of frameworks such as ISO 31000, ITIL, and structured PM environments (Agile/Prince2).
• Experience developing and implementing Risk Management frameworks and governance.
• Skilled at influencing senior stakeholders and driving risk mitigation.
• Confident communicator able to engage both technical and non-technical audiences.
• Experience in Critical National Infrastructure (Utilities) and OT environments essential.

At Telefónica Tech, we believe inclusion is the bridge that empowers everyone to be their authentic selves. We celebrate and respect our differences because diversity drives innovation and makes us stronger.

Be yourself with us, and feel that you belong. We welcome applicants from all backgrounds and identities regardless of age, disability, gender reassignment, marital or civil partnership status, pregnancy or maternity, race, religion or belief, sex, and sexual orientation. We are also committed to equity, accessible hiring practices, and creating an inclusive culture through many means including TogetHer (Women's network) and our Employee Resource Groups which include Diversity and Inclusion, Telefónica Tech Pride, Neurodiversity, ELEVATE (African and Caribbean heritage network), and Sustainability.