IT Risk & Control Manager

Audit & Risk Recruitment; Bolton; On-site; GBP 65,000 - 90,000; Full time

Job summary

Audit & Risk Recruitment has partnered with a rapidly growing retail business to recruit an IT Risk and Control Manager. The role collaborates with UK and Global colleagues to develop IT risk capabilities and deliver IT controls.

Responsibilities include implementing IT controls, assessing technology risks, and driving remediation with IT stakeholders, while seeking opportunities to centralise and automate controls for efficiency.

Qualifications

• Degree level required; professional qualifications such as CISA/CRISC or QBE preferred.
• Minimum 4 years’ IT Risk and Control experience.
• Knowledge of COBIT/ITIL frameworks.

Responsibilities

• Perform IT Control implementation in line with IT Control framework and ICFR Programme.
• Design and implement IT controls, including those with 3rd party reliance.
• Collaborate with IT Programme Assurance to perform deep-dive assessments and drive remediation.
• Identify opportunities to automate controls and processes using existing tools.
• Support Head of IT Risk with information for Audit, Risk and Board meetings.
• Contribute to rollout of Cyber initiatives and build global relationships.
• Escalate risks and issues per governance framework.

Education

Degree level

Job description

The Audit & Risk Recruitment company is working with a rapidly growing retail business to help them find a IT Risk and Control Manager. They are looking for an analytical and motivated individual to work closely with UK and Global colleagues to develop an IT Risk and Control capability.

This role will involve working very closely with our IT colleagues, Control Owners, and Operators to deliver new IT controls, assess technology risks and continually assess and enhance processes, policies, standards. This is a great time to join us at a period of significant growth, change and opportunity.

What you’ll be doing:

• Perform IT Control implementation in line with EG’s IT Control framework and the ICFR Programme (Internal Controls over Financial Reporting).
• Support and manage the design and implementation of new IT controls, including those with a reliance on 3rd party suppliers.
• Work with the existing IT Programme Assurance team and IT stakeholders to perform deep dive assessments, plan and drive through remediation to completion.
• Proactively look for opportunities to centralise and automate controls and processes to drive efficiency using existing tools and technologies.
• Support the Head of IT Risk in collation and delivery of information for Audit, Risk and Board meetings.
• Support rollout of new Cyber Initiatives
• Build relationships globally to become a trusted advisor to our colleagues in IT/cyber
• Ensure that risks and issues identified are reported and escalated in line with the governance framework.

What we’re looking for:

• Qualified to degree level with CISA, CRISC or similar professional qualifications / QBE
• 4 years minimum experience of working within IT Risk and Control
• Confident in designing and documenting new and/or existing IT General Controls from across access, change, and operations domains drawing on experience to do so independently and/or with minimal support.
• Working knowledge of COBIT/ITIL Frameworks