IT Risk Manager

Tradition; London; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading company in the financial sector is seeking an IT Risk Manager for their London office. The role involves identifying and managing IT risks, implementing controls, and ensuring compliance with regulatory standards. Ideal candidates will have a strong background in IT risk management, relevant certifications, and experience in a financial services environment.

Qualifications

• Bachelor’s degree in IT or related field.
• Experience in IT Risk Management or Operational Risk.
• Strong knowledge of IT risk management frameworks such as ISO 27001.

Responsibilities

• Identifying, assessing, and prioritising IT risks.
• Designing and implementing IT controls.
• Conducting regular IT risk assessments.

Skills

IT Risk Management

Operational Risk

Analytical Skills

Problem-Solving

Vendor Management

Compliance

Education

Bachelor’s degree in Information Technology

Relevant certifications such as CRISC, CISA, CGEIT, or ISO 27001 Implementer

Tools

GRC tools

Microsoft Office

Job description

Get AI-powered advice on this job and more exclusive features.

Tradition is the interdealer broking arm of Compagnie Financière Tradition and one of the world's largest interdealer brokers in over-the-counter financial and commodity related products. CFT is represented in over 28 countries, employing over 2,500 people.

Tradition’s goal is to provide superior client services. It believes its business success is a direct reflection of its employees and recruits. As such, teamwork, creativity, reliability and integrity are components of a work ethic taken very seriously since the company was founded in 1959.

Tradition is currently seeking to appoint an IT Risk Manager to be based within the London office.

Main responsibilities within the IT Risk Managerposition include:

• Identifying, assessing, and prioritising IT risks in line with the IT Risk Management Framework and enterprise threat risk program.
• Designing, implementing, and monitoring effective IT controls to mitigate risks and ensure alignment with the group's risk appetite.
• Facilitating Risk and Control Self-Assessments (RCSAs) and ensuring outcomes are recorded within the Risk Management System.
• Monitoring key risk indicators (KRIs), tracking breaches, and reporting on risk trends, control weaknesses, and remediation plans.
• Supporting the development and tracking of risk remediation actions and promoting risk-awareness across IT operations.
• Conducting regular IT risk assessments to identify emerging threats and ensure compliance with regulatory and industry standards.
• Evaluating Governance, Risk, and Compliance (GRC) tools to ensure alignment with business needs and regulatory requirements.
• Maintaining and updating IT policy and procedural documentation in line with operational and compliance needs.
• Acting as the primary liaison during internal and external audits, coordinating responses and tracking audit actions to closure.
• Overseeing third-party IT risk management and leading assurance testing to validate the effectiveness of IT controls.

Key skills, experience and competencies required to be successful in this role:

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• Experience in IT Risk Management, Operational Risk, or a related discipline.
• Hands-on experience with GRC tools—particularly in IT Compliance, IT Risk Management, and Vendor Management—is desirable.
• Strong knowledge of IT risk management frameworks and standards such as ISO 27001 and NIST.
• Proven experience in developing and implementing risk management strategies, policies, and procedures.
• Relevant certifications such as CRISC, CISA, CGEIT, or ISO 27001 Implementer.
• Previous experience in a financial services environment is advantageous.
• Additional risk qualifications with an IT specialism would be beneficial.
• Solid academic background with strong analytical and problem-solving skills.
• Proficiency in Microsoft Office, particularly Excel, Word, and PowerPoint.

Tradition do not accept agency CV’s. Please do not forward CV’s to our employees or Talent team. Tradition are not accountable for any fees related to unsolicited resumes. The Talent team will reach out to trusted agents when required.

Please note, due to the large volume of applications for this position, only suitable candidates will be contacted. If you have not heard from us within 14 days, unfortunately, your application has been unsuccessful.

Tradition welcome all suitable applications and are an equal opportunity employer who value diversity. All employment is decided on the basis of qualifications and merit.

By applying for this role, you agree that we may retain your details on our system for a period of 6 months and may contact you for any future vacancies that may arise within the Tradition Group.

Seniority level

• Seniority level

  Not Applicable

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

Referrals increase your chances of interviewing at Tradition by 2x

Sign in to set job alerts for “Information Technology Risk Manager” roles.

Cyber Security Manager - Incident Response

London, England, United Kingdom 2 weeks ago

Audit, Internal Auditor, Based in London

Greater London, England, United Kingdom $64,900.00-$98,500.00 1 week ago

Senior Pharmacovigilance Manager, Case Processing

Sutton, England, United Kingdom 1 month ago

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 day ago

London, England, United Kingdom 1 day ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.