IT Risk & Control Manager

EG Group; Horwich; Hybrid; GBP 39,000 - 65,000; Full time

Benefits offered by this job

Discretionary bonus

Hybrid working

Cycle to work scheme

Car scheme

Enhanced maternity & paternity leave

Annual leave entitlement

Leave buy back scheme

Discounted gym membership

Volunteering day

Wellbeing facilities

Free on-site parking

Dress Down Fridays

VDU eye test

Job summary

EG Group is seeking an IT Risk and Control Manager to grow our capability across the UK and globally, working with IT colleagues, control owners and operators to implement new IT controls and assess technology risks. This is a hybrid role with opportunities to influence governance and drive improvements across the business.

You will lead design and remediation activities, collaborate with audit teams, and help advance our IT control framework.

Qualifications

• Degree level with relevant professional qualifications (CISA/CRISC).
• Experience in IT internal/ external audit teams in large organisations.
• Ability to design and document IT general controls independently.
• Familiarity with COBIT and ITIL frameworks.

Responsibilities

• Implement IT controls in line with the ICFR programme.
• Design and implement IT controls with third-party reliance.
• Collaborate with IT control teams to drive remediation.
• Identify opportunities to centralise and automate controls.

Skills

IT risk & control

Auditing coordination

Stakeholder management

Project management

Education

CISA

CRISC

Tools

COBIT framework

ITIL framework

Job description

Salary: Up to £65,000 (Dependant on Experience)

Company: EG Group

About the Role:

Are you an IT Risk and Control Manager looking to grow your career and work with an international business? EG Group are on the lookout for an analytical and motivated individual to work closely with our UK and Global colleagues to develop our IT Risk and Control capability in line with our IT control framework.

This role will involve working very closely with our IT colleagues, Control Owners, and Operators to deliver new IT controls, assess technology risks and continually assess and enhance processes, policies, standards. This is a great time to join us at a period of significant growth, change and opportunity.

If you have experience and a passion for working in IT Risk and Control, then we would love to hear from you!

Why Join EG Group?

• Discretionary performance-based bonus scheme
• Grow your career – gain accredited qualifications, apprenticeships, and progression opportunities within a global organisation
• Hybrid working – up to 2 days per week (dependent on role and business needs)
• Salary Sacrifice Schemes – Cycle to Work and Car Scheme available
• Enhanced Maternity & Paternity leave
• Generous annual leave entitlement
• Annual leave buy back scheme – purchase up to 5 additional days
• Discounted gym membership – stay healthy and save on fitness costs
• One paid volunteering day per year
• Wellbeing facilities – space to relax and recharge
• Free secure on‑site parking
• Dress Down Fridays
• Free VDU eye test

What you’ll be doing:

• Perform IT Control implementation in line with EG’s IT Control framework and the ICFR Programme (Internal Controls over Financial Reporting).
• Support and manage the design and implementation of new IT controls, including those with a reliance on 3rd party suppliers.
• Work with the existing IT Controls project teams and IT stakeholders to perform deep dive assessments, plan and drive through remediation to completion.
• Proactively look for opportunities to centralise and automate controls and processes to drive efficiency using existing tools and technologies.
• Support the Head of IT Risk and Control in collation and delivery of information for Audit, Risk and Board meetings.
• Liaise with internal/external audit where required and align closely with our business colleagues.
• Keep awareness of project pipeline activities and proactively conduct landscape reviews with the wider team to assess new/changing applications to support planning/resource requirements.
• Build relationships globally to become a trusted advisor to our colleagues in all things IT Risk and Control.
• Ensure that risks and issues identified are reported and escalated in line with the governance framework.
• Drive an effective risk & control culture across EG Group, promoting accountability, responsibility, and action, acting as a risk & control ambassador for Group IT.

This list is not exhaustive and may be added to or amended from time to time.

What we’re looking for:

• Qualified to degree level with CISA, CRISC or similar professional qualifications / QBE
• 4 years minimum experience of working with or within IT internal audit/external audit teams within a big 4 or similar corporate environment.
• Confident in designing and documenting new and or existing IT General Controls from across access, change, and operations domains drawing on experience to do so independently and or with minimal support.
• Working knowledge of COBIT/ITIL Frameworks
• Comfortable performing IT Risk Assessments across a variety of IT domains.
• Strong analytical and problem‑solving skills, being able to decipher sometimes complex information, analyse and report on for different audiences.
• Organised, methodical and capable of managing multiple projects at once with minimal supervision.
• Strong project management skills, results driven individual capable of driving change and unfazed by blockers/challenges.

Who are EG Group?

EG Group is a leading global convenience retailer, operating a wide range of brands across multiple sectors including fuel, foodservice, and grocery retail. With a presence in up to 7 countries and a commitment to innovation and customer service, EG Group continues to expand its portfolio and reach. Our company is focused on delivering value to its customers, partners, and stakeholders through efficient operations and strategic growth.

Please note – the successful applicant will be subject to a DBS check which will be funded by EG Group.