IT Risk Manager

easyJet Airline Company PLC; London; Hybrid; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking an IT Risk Manager to enhance their IT Risk Management practice. In this hybrid role, you will work closely with various stakeholders, identifying and mitigating IT risks while ensuring compliance with regulations. Your expertise in risk assessment and governance frameworks will be crucial as you facilitate workshops and report on risk scenarios. If you thrive in a fast-paced environment and are passionate about driving IT risk improvements, this opportunity is perfect for you. Join a dynamic team and make a significant impact on the organization's IT strategy.

Qualifications

• Ability to identify, assess and express IT risks clearly.
• Experience with IT governance frameworks like COBIT and ITIL.

Responsibilities

• Implementing and improving the IT Risk Management practice.
• Facilitating risk workshops and supporting internal audits.

Skills

Stakeholder Management

Risk Assessment

Problem Solving

Negotiation

IT Governance Frameworks

Education

Degree in IT or related field

Professional Risk Management Certification

Tools

COBIT

ITIL

ISO 27001

Job description

We have an exciting opportunity for an IT Risk Manager to join us on a permanent contract, based in Luton! (Hybrid Working)

The IT Strategy & Architecture team provides leadership around easyJet’s technology strategy, the evolution of our enterprise IT architecture, solution architectures for complex change, cybersecurity architecture, our federated technical architecture practice, and areas such as end-to-end IT risk management.
Reporting to the Head of IT Risk & Resilience, the IT Risk Manager is responsible for implementing, embedding and continuously improving easyJet’s IT Risk Management practice.

We work collaboratively with a broad range of colleagues and stakeholders at all levels (from the C-suite to the frontline) and focus on striking a pragmatic balance between supporting in-flight initiatives and steering longer-term investment.

What you’ll be doing

• Planning, designing and implementing the overall risk management process as part of the maturing IT Risk framework that is applied across easyJet IT.
• Identifying, analysing and prioritising key areas of IT risk as well as articulating the impacts they may present to the easyJet business in order for informed, conscious decisions to be made.
• Interfacing with technical and non-technical stakeholders within easyJet to build and maintain valuable and productive working relationships and ensure that the benefits of managing IT Risk to the business are demonstrated.
• Facilitating risk workshops to support the identification and assessment of risks and controls
• Supporting the Internal Audit process including understanding and articulation amongst IT stakeholders of key IT risks underlying in any resulting actions.
• Maintaining risk artefacts (e.g. IT Risk Register, Bow Tie Risk Reporting etc.) to demonstrate the effects of managing IT risk (both via tactical and strategic planning).
• Providing IT risk SME advice, oversight and challenge to facilitate and drive action plan accountability for decreasing and mitigating risk.
• Coordinating the accountable risk owners to ensure mitigation activities are managed, effective and aligned with easyJet requirements.
• Reporting on risk in an appropriate way for different stakeholders including the IT Leadership Team, presenting and explaining the assessment of risk scenarios as well as mapping of capability controls, metrics and measures.
• Identify opportunities for IT process improvement using existing framework and controls.
• Managing IT capability and control requirements and analysing and articulating gaps both within IT, Data and Change and with other key stakeholders including Corporate Risk, Safety Risk and Digital Safety.

What you’ll bring to the team

• Ability to clearly identify, assess and express risks, relating them to the wider business context.
• Understanding of risks and controls relating to the governance and management of IT as well as the technology itself
• Excellent stakeholder management, facilitation, negotiation and collaboration skills
• Be confident in presenting the IT risk position and recommendations to both an IT and business audience
• Sound judgement, decision making, planning, organising and problem solving in high pressure situations
• Be a business-focussed, creative, innovative pragmatic and positive team player
• Ability to thrive in a fast-paced environment and independently manage priorities and challenges to balance delivery across multiple initiatives, stakeholders etc.
• Understanding and practical experience of applying IT management/governance frameworks (e.g. COBIT, IT-CMF)
• Knowledge of the legal and regulatory environment within which easyJet operates as well as specific relevant regulations and standards such as NIS, GDPR, PCI DSS etc.
• Knowledge of topic-specific framework & methodologies in areas such as Risk
• Management (ISO 31000) IT management (e.g. COBIT) Information Security (NIST, ISF, ISO 27001), Service Delivery (e.g. ITIL) etc.

What we can offer you

#LI-HYBRID

Business Area

Primary Location