IT & IS Oversight Manager

Cabot Financial; Greater London; On-site; GBP 80,000 - 110,000; Full time

Job summary

Cabot Credit Management is seeking an experienced technology professional to join our Enterprise Risk Management team as an Information Security & IT Oversight Manager.

In this senior second-line role, you will provide independent oversight, challenge and assurance across IT and Information Security, ensuring technology risks are effectively managed and activities operate within agreed frameworks, controls and risk appetite.

Qualifications

• Strong background in IT, Information Security, Technology Risk, IT Audit or related discipline.
• Practical knowledge of information security controls, cyber risk, data protection and frameworks such as ISO 27001 or NIST.
• Experience operating in a regulated environment, ideally Financial Services.
• Solid understanding of risk management, governance and control frameworks, with ability to assess risks and identify improvements.
• Excellent analytical and problem-solving skills, with ability to translate complex information into actionable insights.
• Experience reviewing technology and security controls and providing constructive challenge to drive positive outcomes.
• Strong communication and stakeholder management skills for engagement at all levels.
• Experience producing high-quality reports and presenting findings to senior leaders and governance forums.
• Previous people management or leadership experience.

Responsibilities

• Provide independent oversight and challenge across IT and Information Security, ensuring risks are effectively managed and activities align with governance frameworks and risk appetite.
• Act as a trusted subject matter expert during the change lifecycle, reviewing changes to ensure risks and controls are identified, implemented and operating effectively.
• Assess the design and effectiveness of IT and Information Security controls, identifying areas for improvement and supporting remediation.
• Lead risk and control assessments, control testing and scenario analysis, ensuring risks are captured, monitored and reported.
• Support the ongoing development and enhancement of our Enterprise Risk Management (ERM) and IT & Information Security risk frameworks.
• Provide oversight of security incidents, operational events and control failures, with root cause analysis and corrective actions.
• Ensure compliance with regulatory requirements, industry standards and internal policies, while supporting audits.
• Produce meaningful risk reporting and insights for senior leaders, committees and governance forums to support informed decisions.
• Build strong relationships across Technology, Cyber Security, Operations, Compliance and Audit teams to drive continuous improvement and strengthen risk maturity.
• Lead and develop a team of risk professionals, fostering accountability and high performance.

Skills

Information Security

IT Governance

Risk Management

Regulatory Compliance

IT Audit

Change lifecycle

Stakeholder Management

Leadership

Job description

Cabot Credit Management are looking for an experienced technology professional to join our Enterprise Risk Management team as an Information Security & IT Oversight Manager. In this senior second-line role, you'll provide independent oversight, challenge and assurance across our IT and Information Security functions, ensuring technology risks are effectively managed, and activities operate within agreed frameworks, controls and risk appetite.

Drawing on your experience in IT delivery, operations or technology leadership, you'll assess the effectiveness of controls, review key technology and security initiatives, and provide constructive challenge to help drive better risk and control outcomes. Working closely with senior stakeholders across the business, you'll play a key role in strengthening governance, improving risk maturity and ensuring technology and security activities remain aligned with regulatory and business expectations.

What you can expect as an Information Security & IT Oversight Manager:

Key responsibilities include:

• Providing independent oversight and challenge across IT and Information Security, ensuring risks are effectively managed and activities remain aligned to our governance frameworks and risk appetite.
• Acting as a trusted subject matter expert throughout the change lifecycle, reviewing technology and security changes to ensure risks and controls are identified, implemented and operating effectively.
• Assessing the design and effectiveness of IT and Information Security controls, identifying areas for improvement and supporting remediation activities.
• Leading risk and control assessments, control testing and scenario analysis, ensuring risks are accurately captured, monitored and reported.
• Supporting the ongoing development and enhancement of our Enterprise Risk Management (ERM) and IT & Information Security risk frameworks.
• Providing oversight of security incidents, operational events and control failures, ensuring robust root cause analysis and appropriate corrective actions are implemented.
• Ensuring compliance with relevant regulatory requirements, industry standards and internal policies, while supporting internal and external audit activity.
• Producing meaningful risk reporting and insights for senior leaders, committees and governance forums to support informed decision-making.
• Building strong relationships across Technology, Cyber Security, Operations, Compliance and Audit teams to drive continuous improvement and strengthen risk maturity.
• Leading and developing a team of risk professionals, creating a culture of accountability, collaboration and high performance.

We are looking for someone with:

We're looking for an experienced technology, information security, risk or audit professional who can bring a combination of technical expertise, strong governance knowledge and commercial judgement.

To be successful in this role, you'll bring:

• A strong background in IT, Information Security, Technology Risk, IT Audit or a related discipline.
• Practical knowledge of information security controls, cyber risk, data protection and technology risk frameworks such as ISO 27001 or NIST.
• Experience operating within a regulated environment, ideally Financial Services.
• A solid understanding of risk management, governance and control frameworks, with the ability to assess risks and identify opportunities for improvement.
• Excellent analytical and problem-solving skills, with the ability to interpret complex information and translate it into clear, actionable insights.
• Experience reviewing technology and security controls and providing constructive challenge to drive positive outcomes.
• Strong communication and stakeholder management skills, with the ability to engage and influence colleagues at all levels.
• Experience producing high-quality reports and presenting findings to senior leaders, committees and governance forums.
• Previous people management or leadership experience, with a passion for developing and coaching others.

We'd be particularly interested in hearing from candidates who have:

• Professional qualifications such as CISA, CISSP, CISM, CRISC, IRM or equivalent.
• Experience of IT audit, SOX controls, operational resilience, third-party risk management or technology transformation programmes.
• Knowledge of collections operations, customer data management and associated regulatory requirements.
• Experience working within financial services, banking, investments or other highly regulated industries.

What happens next?

Working for Cabot:

You’ll be working for an award winning; Investors in People Gold accredited organisation. We’re passionate about the ethical treatment of our customers and employees. Our mission is to create pathways to economic freedom. Our vision is to make credit accessible by partnering with our consumers to restore their financial health.

Diversity and inclusion are very important to us at Cabot, and we value a multitude of diverse talent within our business. We want everyone to be themselves at work and encourage a culture that includes everyone. Our policies ensure that every candidate and employee are treated fairly and with equal opportunities.

**At Cabot we are highly regulated by our clients, as such, any successful candidates will have to undergo a basic credit check and criminal background check. Please note that we are unable to proceed to interview stage if a CCJ, IVA or Bankruptcy appears on a credit file, or if you do not have full right to work in the UK – we are unfortunately unable to offer sponsorship.**