IT Governance, Risk and Control Specialist | Larkfield, UK

Midland Credit Management, Inc.; Ditton; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Bonus scheme

Private health insurance

Discounts and cash back

Job summary

Cabot Financial is seeking an IT Governance, Risk & Control Specialist to strengthen and expand our IT control environment across the UK and Europe. You will design, implement, and embed governance controls for backup, vulnerability, resilience, and operations, working with IT Operations, Risk, Compliance, Audit and business stakeholders.

In this role, you will drive best practice across SOX, ISO 27001, NIST and PCI, support risk management, and help embed a culture of operational excellence.

Qualifications

• Proven track record of delivery in IT governance or risk and controls roles.
• Experience with regulatory standards such as ISO27001, SOX, NIST and PCI.
• Ability to design, implement, and embed IT governance controls across IT operations.

Responsibilities

• Develop and continually improve IT governance, risk, and control frameworks.
• Review IT policies, procedures, and controls for effectiveness and regulatory alignment.
• Coordinate audits and evidence collection across SOX, ISO27001, NIST and PCI.
• Monitor and remediate audit findings and IT operational risks.
• Provide guidance to IT Operations and stakeholders on governance and compliance.

Skills

IT Governance

Risk & Controls

Regulatory frameworks

Tools

ISO27001

SOX

NIST

PCI

Job description

IT Governance, Risk and Control Specialist

Are you an IT Governance, Risk & Controls professional who thrives on turning frameworks into effective, auditable processes?

At Cabot Financial, we're looking for an experienced specialist to help strengthen and expand our IT control environment across the UK and Europe. Building on a well-established SOX controls framework, you'll play a key role in designing, implementing, and embedding broader IT governance and operational controls, ensuring critical processes such as backup, vulnerability, resilience, and operational management are effectively governed, evidenced, and continuously improved.

Working closely with IT Operations, Risk, Compliance, Audit, and business stakeholders, you'll help drive best practice across regulatory frameworks including SOX, ISO 27001, NIST and PCI, while supporting a culture of strong risk management and operational excellence.

What you can expect as an IT Governance, Risk & Control Specialist:

• FTC - 12 month FTC
• Hybrid role (with flexibility) - From our Kings Hill office, ME19 4UA.
• Not only are we offering a competitive salary and a fantastic bonus scheme, you'll also be entitled to loads of great benefits including, discount and cash back on hundreds of high-street shops and private health insurance, plus much more.

Key responsibilities include:

• Develop, implement and continuously improve IT Governance, Risk and Control frameworks across IT Operations.
• Review and maintain IT policies, procedures and controls to ensure they remain effective, compliant and aligned to business and regulatory requirements.
• Act as the key IT Operations contact for internal and external audits, coordinating responses and supporting evidence collection across frameworks including SOX, ISO 27001, NIST and PCI.
• Monitor, report on and support the remediation of audit findings, control gaps and IT operational risks.
• Provide expert guidance on governance, risk and compliance matters to IT Operations and wider business stakeholders.
• Partner with Risk, Compliance, Audit and IT teams to embed best practice and strengthen the organisation's control environment.
• Support business continuity, resilience, patch management and vulnerability management activities from a governance and controls perspective.
• Drive continuous improvement initiatives to increase the effectiveness, efficiency and maturity of IT controls and processes.
• Build and maintain high-quality governance documentation, audit artefacts and control evidence repositories.

We are looking for someone with:

Knowledge & Experience

• Proven track record of delivery in an IT Governance or Risk and Controls role
• In depth knowledge of IT and regulatory frameworks standards: e.g. ISO27001/Sarbanes-Oxley/ NIST/PCI

Personal Attributes

• Ability to multitask; used to working under pressure and owning problems through to resolution; ability to meet strict deadlines.
• Strong customer focus with the drive and commitment to improve the level of service clients receive (internal/external).
• Excellent relationship building skills
• Ability to effectively communicate to IT staff as well and senior stakeholders/risk committees.
• Strong drive for results to ensure audit actions and recommendations are actioned in a timely manner

Working for Cabot:

You’ll be working for an award winning; Investors in People Gold accredited organisation. We're passionate about the ethical treatment of our customers and employees. Our mission is to create pathways to economic freedom. Our vision is to make credit accessible by partnering with our consumers to restore their financial health.

Diversity and inclusion are very important to us at Cabot, and we value a multitude of diverse talent within our business. We want everyone to be themselves at work and encourage a culture that includes everyone. Our policies ensure that every candidate and employee are treated fairly and with equal opportunities.

At Cabot we are highly regulated by our clients, as such, any successful candidates will have to undergo a basic credit check and criminal background check. Please note that we are unable to proceed to interview stage if a CCJ, IVA or Bankruptcy appears on a credit file, or if you do not have full right to work in the UK - we are unfortunately unable to offer sponsorship.