IT & Data Risk Lead for Large-Scale Transformations

Aviva; West of England; On-site; GBP 51,000 - 69,000; Full time

Benefits offered by this job

Pension up to 14%

29 days holiday

Private medical

Staff discounts

Matching share plan

Save As You Earn

Volunteer days

Wellbeing support

Job summary

Aviva is seeking an IT and Data Risk Manager to strengthen 2nd line risk oversight within the Insurance, Wealth and Retirement (IWR) business. You will partner with programme teams to embed risk disciplines and provide independent challenge on complex change initiatives.

The role requires knowledge of change processes, regulatory requirements and technology risk frameworks, plus strong analytical and communication skills to influence stakeholders and drive a positive risk culture.

Qualifications

• Experience with change processes, controls and risks across transformation programs.
• Knowledge of risk frameworks and regulatory requirements incl. COBIT, ISO 27001, ITIL and NIST CSF.
• Strong analytical and problem-solving skills to articulate tech risks and impacts.
• Excellent communication and stakeholder collaboration to lead cross-functional risk initiatives.
• Ability to work with light supervision and manage multiple projects.

Responsibilities

• Support 2nd line risk oversight within the IWR business and partner with programme teams to embed risk disciplines.
• Provide independent challenge and shape a positive risk culture in a fast-moving change environment.
• Assess and remediate change risks and controls, including control testing, under Aviva Change Framework standards.

Skills

Change risk management

Risk frameworks

Regulatory knowledge

Data risk

Stakeholder communication

Cross-functional leadership

Tools

COBIT

ISO 27001

ITIL

NIST CSF

Job description

Aviva is seeking an IT and Data Risk Manager to strengthen 2nd line risk oversight within the Insurance, Wealth and Retirement (IWR) business. You will partner with programme teams to embed risk disciplines and provide independent challenge on complex change initiatives.

The role requires knowledge of change processes, regulatory requirements and technology risk frameworks, plus strong analytical and communication skills to influence stakeholders and drive a positive risk culture.