IT Risk - Senior Manager

AVEVA Group; Greater London; Hybrid; GBP 110,000 - 160,000; Full time

Benefits offered by this job

Flexible benefits fund

28 days annual leave

Pension

Private medical insurance

Education assistance program

Job summary

AVEVA is seeking an IT Risk - Senior Manager in London or Cambridge. You will lead the technology risk lifecycle, ensuring risks are identified, assessed, treated, monitored and reported in line with risk appetite.

The role collaborates with Enterprise Risk Management and Security Risk Management, maturing the IT Risk Framework and reporting to IT Leadership and risk committees. Hybrid work model with 50% in office.

Qualifications

• Demonstrable experience in technology risk, IT GRC, cyber risk or IT audit within a tech-led organisation.
• Minimum 10 years’ experience across IT and Security in global environments.
• Strong knowledge of core tech risk domains like IAM/PAM, vulnerability management, cloud risk, logging/monitoring.

Responsibilities

• Oversee IT Risk Management following Enterprise Risk Management Framework and Taxonomy.
• Produce governance materials for IT Leadership Team and risk forums.
• Evaluate new risks and develop appropriate treatment plans with cross-functional teams.
• Drive alignment between IT, Security and Enterprise Risk Management on risk capture, scoring and reporting.
• Provide risk escalation guidance and proactive risk tracking using standard tooling.
• Ensure IT risks are raised, understood, and managed from audits, projects and BAU.

Skills

IT risk

GRC

Cyber security

Operational risk

IT audit

Leadership

Stakeholder management

Tools

Riskonnect

Excel

PowerPoint

BI reporting

Job description

Cambridge, United Kingdom

London Cannon Street

Full time

R016018

AVEVA is creating software trusted by over 90% of leading industrial companies.

Job Title: IT Risk - Senior Manager

Location: London or Cambridge

Employment Type: Full-time / Hybrid (50% in office)

The job

As a software business, technology risk and cyber/security risk directly impact product availability, customer trust, and regulatory commitments. The IT Risk Senior Manager is accountable for running a consistent, evidence-based technology risk lifecycle IT, ensuring risks are identified, assessed, treated, monitored, and reported in line with risk appetite.

The IT Risk Senior Manager will be responsible for the management of all risks across IT. The role will have close ties with the Enterprise Risk Management Team ensuring alignment and regular cadence. Further, collaboration with the Security Risk Management Team will be essential ensuring alignment on ways of working, best practice, and ongoing operational risk management.

Based on industry best practice, the individual will guide our function to a robust Risk Management service, providing insight and reporting to the IT Leadership teams as well as Enterprise Risk Management and Security Risk Committees. Working closely with other IT functions, the role will be responsible for maturing the IT Risk Framework, driving standards, understanding and engagement.

You will be responsible for following risks through from initiation to mitigation and ensuring the overall risk appetite is understood and actively managed. The role will leverage Riskonnect, our corporate GRC system, to manage the technology risk register, action tracking, and reporting.

Key responsibilities

• Responsible for IT Risk Management and adherence to the Enterprise Risk Management Framework and Taxonomy


• Produce governance materials for the IT Leadership Team, Enterprise Risk Management and Security Risk Management forums


• Evaluate new risks and identify and assess impact to the business and IT and develop appropriate treatment plans


• Drive alignment between IT, Security and Enterprise Risk Management on how risks are captured, scored, and reported


• Provide risk escalation management and guidance


• Proactively track and manage IT Risks and treatment plans using standard tooling and a clear framework assuring high data quality


• Ensure IT risks are actively raised, understood and managed from audits, projects, incidents and other BAU activities


• Ensure risks have pragmatic, time-bound treatment plans; track delivery and elevate slippage or risk appetite breaches


• Responsible for keeping IT Policy and supporting operating procedures up to date


• Lead IT Risk Management training sessions and briefings in line with maturity and best practice


• Mature IT Risk Appetite Metrics. KRI’s and KPIs and mature reporting and relevant dashboards


• Identify AI use cases for improving risk management processes and ways of working


• Take ownership of risks arising from audits and follow through to completion


• Identify opportunities to streamline and improve the risk management process


• Coach more junior team members to drive maturity of IT GRC risk service

Essential requirements

• Demonstrable experience in technology risk, IT GRC, cyber risk, operational risk, or IT audit within a technology-led organisation (software/SaaS preferred).


• Minimum of 10 years’ experience across IT and Security working in global environments


• Strong knowledge of core technology & cyber risk domains: IAM/PAM, vulnerability and patch management, secure configuration, cloud risk, logging/monitoring, incident learnings, backup/DR and resilience, change/release risk.


• Strong leadership skills demonstrating ability to present articulately and concisely


• Excellent presentation skills, able to coordinate and facilitate workshops for technical teams across AVEVA


• 5+ years of leading IT risk management in a complex environment


• Understanding of industry best practices for Risk Management across IT, AI and CyberSecurity


• Growth mindset to learn and engage with new technologies


• Must be able to work independently as well as collaborating in cross-functional teams as required


• The ability to build strong relationships with internal and external stakeholders


• Excellent communicator, both written and spoken


• Experience of working with regulatory frameworks such as SOX and NIST


• Riskonnect Experience preferred • Strong Excel/PowerPoint skills; BI/reporting tools

Find out more: https://www.aveva.com/en/about/careers/

UK Benefits include:

Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave (plus bank holidays), pension, life cover, private medical insurance, parental leave, education assistance program.

It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.

Find out more: aveva.com/en/about/careers/benefits/

Hybrid working

We work in a hybrid way at AVEVA. Most roles are based at a local AVEVA office, with an expectation of being on-site 50% of your working hours to support collaboration and connection. Some positions are fully office-based depending on the nature of the work, and certain roles that support specific customers or markets may be remote. The working arrangement for this position will be confirmed during the hiring process.

About AVEVA

AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.

We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/

Find out more: aveva.com/en/about/careers/

AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third-party personal data may involve additional background check criteria.

AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. AVEVA provides reasonable accommodation to applicants with disabilities where appropriate. If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case-by-case basis.

Empowering you with pioneering tech

AVEVA is a global leader in industrial software. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals and minerals – safely, efficiently and more sustainably.

We’re the first software business in the world to have our sustainability targets validated by the SBTi, and we’ve been recognized for the transparency and ambition of our commitment to diversity, equity, and inclusion. We’ve also recently been named as one of the world’s most innovative companies.

If you’re a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you! Find out more at AVEVA Careers (https://www.aveva.com/en/about/careers/).

For more information about our privacy policy and how to manage cookies, visit our Privacy Policy (https://www.aveva.com/content/dam/aveva/documents/external/AVEVA-Recruitment-Candidate-Fair-Processing-Notice-2024.pdf).