IT Risks & Control Manager

Csod; Eastleigh; Hybrid; GBP 59,000 - 89,000; Full time

Benefits offered by this job

Flexible Working

Health Insurance

Annual Bonus

Pension Plan

Wellbeing Activities

Job summary

Ageas is seeking an experienced IT Risks & Controls Manager to join the Governance, Risk and Compliance team. You will own the IT risk register, assess controls and lead risk discussions across technology, reporting to the GRC Lead.

This senior role requires knowledge of ISO/IEC 27001 and NIST-aligned controls, experience with GRC tools, and the ability to translate technical risk into clear, decision-ready insights for governance forums.

Qualifications

• Strong experience in IT risk management, technology risk or information security risk.
• Good knowledge of IT control frameworks, ISO/IEC 27001 and NIST-aligned controls.
• Experience maintaining IT risk registers and working with GRC tools.
• Confidence facilitating senior stakeholder discussions and governance meetings.
• Ability to translate technical risk and control issues into clear, decision-ready insight.
• A pragmatic, structured and risk-based approach, with strong attention to detail.

Responsibilities

• Lead IT risk and control assessments using recognised frameworks such as ISO/IEC 27001 and NIST-aligned controls.
• Own and maintain the IT risk register, ensuring risks, controls and treatment plans are accurate and up to date.
• Assess the design and effectiveness of IT controls and support timely remediation, acceptance or escalation of risks.
• Facilitate IT risk meetings with senior technology leaders, providing clear insight and practical recommendations.
• Produce meaningful risk reporting covering trends, control effectiveness and key issues for governance forums.
• Support internal and external audits by providing evidence aligned to recognised control frameworks.
• Work with Security Architecture, Engineering and Operations teams to ensure risks are managed through effective, proportionate controls.

Skills

IT risk management

Technology risk

Information security risk

IT control frameworks

GRC tools

Stakeholder facilitation

Risk-based approach

Education

ISO 27001 Lead Implementer/Auditor

Job description

Job Title: IT Risks & Control Manager
Target Start Date: ASAP
Contract Type: Permanent, Part Time, Full Time, Job Share option available
Salary Range: £59,200 - £88,800
Location: Hybrid, Eastleigh
Closing Date for applications: Thursday 8th October

IT Risks & Control Manager: We’re looking for an experienced IT Risk and Controls Manager to join our Information Security Governance, Risk and Compliance team. In this senior specialist role, you’ll lead the identification, assessment, management and reporting of IT risks across Ageas, helping ensure technology risks are clearly understood, documented and managed in line with our risk appetite.
Reporting to the Governance, Risk and Compliance Lead, you’ll own the IT risk register, facilitate senior IT risk discussions and provide clear, high-quality reporting for governance forums and second-line risk teams.

Main Responsibilities as IT Risks & Control Manager

• Lead IT risk and control assessments using recognised frameworks such as ISO/IEC 27001 and NIST-aligned controls.
  
• Own and maintain the IT risk register, ensuring risks, controls and treatment plans are accurate and up to date.
  
• Assess the design and effectiveness of IT controls and support timely remediation, acceptance or escalation of risks.
  
• Facilitate IT risk meetings with senior technology leaders, providing clear insight and practical recommendations.
  
• Produce meaningful risk reporting covering trends, control effectiveness and key issues for governance forums.
  
• Support internal and external audits by providing evidence aligned to recognised control frameworks.
  
• Work with Security Architecture, Engineering and Operations teams to ensure risks are managed through effective, proportionate controls.

Skills and experience you need asIT Risks & Control Manager

• Strong experience in IT risk management, technology risk or information security risk.
  
• Good knowledge of IT control frameworks, particularly ISO/IEC 27001 and NIST-aligned controls.
  
• Experience maintaining IT risk registers and working with GRC tools.
  
• Confidence facilitating senior stakeholder discussions and governance meetings.
  
• Ability to translate technical risk and control issues into clear, decision-ready insight.
  
• A pragmatic, structured and risk-based approach, with strong attention to detail.

It would be great if you also have -

• Certifications such as CRISC, CISM, CISSP or ISO 27001 Lead Implementer/Auditor.
  
• Experience working in a regulated or high-assurance environment.
  
• Experience mapping controls across ISO 27001, NIST and internal frameworks.

At Ageas we offer a wide range of benefits to support you and your family inside and outside of work, which helped us achieve, Top Employer status in the UK.

Here are some of the benefits you can enjoy at Ageas

Flexible Working- Smart Working @ Ageasgives employees flexibility around location (as long as it’s within the UK) and, for many of our roles, flexibility within the working day to manage other commitments, such as school drop offs etc. We also offer all our vacancies part-time/job-shares. We also offer a minimum of 35 days holiday (inc. bank holidays) and you can buy and sell days.

Supporting your Health- Dental InsuranceHealth Cash Plan, Health Screening, Will Writing, Voluntary Critical Illness, Mental Health First Aiders, Well Being Activities – Mindfulness.

Supporting your Wealth- 50% off esure and Sheilas' Wheels motor and home insurance, Annual Bonus Schemes, Annual Salary Reviews, Competitive Pension, Employee Savings, Employee Loans.

Supporting you at Work- Well-being activities, mindfulness sessions, Sports and Social Club events and more.

Supporting you and your Family- Maternity/pregnant parent/primary adopter entitlement of 16 weeks at full pay and paternity/non-pregnant parent/co-adopter at 8 weeks’ full pay.

Benefits for Them- Partner Life Assurance and Critical Illness cover.

Get some Tech- Deals on various gadgets including Wearables, Tablets and Laptops.

Getting around- Car Salary Exchange, Cycle Scheme, Vehicle Breakdown Cover.

Supporting you back to work- Returnto work programme after maternity leave.

About Ageas

We are one of the largest car and home insurers in the UK. Our People help Ageas to be a thriving, creative and innovative place to work. We show this in the service we provide to over four million customers.
As an inclusive employer, we encourage anyone to apply. We’re a signatory of Race at Work Charter and Women in Finance Charter ,member of iCAN and GAIN .As a Disability Confident Leader ,we are committed to ensuring our recruitment processes are fully inclusive. That means if you are applying for a job with us, you will have fair access to support and adjustments throughout your recruitment experience.If the list does not cover the support you need, please contact our Recruitment Team to discuss how they can help. We also guarantee an interview for applicants with a disability who meet the minimum criteria for the role. For more information, please see Ageas Everyone .We have a zero-tolerance approach towards any form of harassment during the recruitment process, ensuring that everyone is treated with respect and professionalism.
Our aim is to have great people everywhere in our business and we’re always looking for outstanding people to join us. Most roles across Ageas allow a proportion of your time to be spent working from home and we’re open to discussing flexible working, including full-time, part-time or job share arrangements.To find out more about Ageas, see About Us .

You can view the Ageas Group Applicant Privacy Policy here.