Manager, IT Risk

Amcor; West of England; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Amcor is seeking a Manager, IT Risk to lead identification, assessment, and reporting of IT and cybersecurity risks across the organization. You will collaborate with business and technology stakeholders to strengthen cybersecurity maturity and resilience in a changing threat landscape.

The role oversees risk workshops, risk assessments, and management reporting, driving remediation, and aligning with governance forums. Hybrid work arrangement in a global IT environment is offered.

Qualifications

• Minimum 12 years of total professional experience with 7+ years in IT/cybersecurity risk management, IT audit, or GRC.
• Experience leading enterprise-wide IT and cybersecurity risk activities, including governance, risk committees, and senior management reporting.
• Formal education in IT, Audit or related field with strong knowledge of cybersecurity risk concepts, governance, and regulatory requirements.
• Proven ability to work in a complex, global, matrixed organization with senior stakeholders.
• Certifications such as CRISC, CISA or ISO27001 LA are preferred.
• Solid understanding of risk management principles, governance frameworks, and regulatory requirements.
• Ability to identify, assess, prioritize and communicate business impact of IT/cybersecurity risks.
• Excellent communication and facilitation skills for senior leadership audiences.
• Strong stakeholder management and accountability without direct authority.

Responsibilities

• Lead and coordinate IT and cybersecurity risk committee meetings, including setting agendas and following up on actions.
• Develop and report IT risk metrics, KPIs, trends to IT leaders, Audit Committee and governance forums.
• Apply qualitative risk assessment methodologies to support risk-based decisions.
• Oversee risk assessments for existing/emerging technologies, services, projects, and third parties.
• Provide independent risk oversight and challenge to IT, cybersecurity and business teams.
• Drive risk posture improvements through treatment plans and remediation monitoring.
• Advance the IT and cybersecurity risk management framework end-to-end.
• Maintain relationships with stakeholders involved in IT/cyber risk management across the organization.

Skills

IT risk management

Cybersecurity governance

Stakeholder management

Communication

Risk assessment

GRC knowledge

Education

Bachelor’s degree in Information Technology, Audit or related field

Tools

CRISC

CISA

ISO27001 LA

Job description

Back to search results

Manager, IT Risk

Location: Lodz, PL Bristol, GB Porto, PT Lugo, IT

Department: Information Technology

Full-time or Part-time: Full-Time

Job Type: Employee

Shift: Hybrid

Accelerate the possible by joining a winning Amcor team that is transforming the packaging industry and improving lives around the world.

At Amcor, we unpack possibility through our innovative and responsible packaging to provide solutions that benefit our customers, our people and our planet. More than 10,000 consumers worldwide encounter our products every second and rely on us for safe access to food, medicine and other goods. We value their trust by making safety our guiding principle. It's our core value and integral to how we do business.

Beyond this core principle, our shared values and behaviors unite us as we work together to elevate customers, shape lives and protect the future. We champion our customers and help them succeed. We play to win - adapting quickly in an everchanging world - and make smart choices to safeguard our business, our communities and the people we serve for generations to come. And we invest in our world-class team, empowering our colleagues to unpack their potential, because we believe when our people grow, so does our business.

To learn more about playing for Team Amcor, visit www.amcor.com I LinkedIn I Glassdoor I Facebook I YouTube

About The Role

The Manager, IT Risk will play a key role in developing, leading, and overseeing initiatives to identify, assess, manage, and report IT and cybersecurity risks across Amcor. Working closely with business and technology stakeholders, the role will support risk-based decision-making and contribute to the continued enhancement of Amcor’s cybersecurity maturity and resilience in an evolving threat landscape.

The role is responsible for overseeing the effective management of risks to the organization’s information assets, facilitating internal and external risk workshops, coordinating risk assessments, and maintaining strong collaboration across relevant teams. The role will also lead the preparation of risk committee presentations and management reporting, support compliance with applicable standards and requirements, and drive the ongoing monitoring and management of IT and cybersecurity risks.

Key Job Accountabilities

Prepare, coordinate, and lead periodic IT and cybersecurity risk committee meetings, including agenda setting, risk prioritization, stakeholder alignment, presentation of key risks, and follow-up of agreed decisions and actions. Develop and report IT and cybersecurity risk metrics, key risk indicators, trends, and risk statistics to the IT Leadership Team, Audit Committee, and other relevant governance forums to support effective oversight and risk-based decision-making. Apply and continuously improve qualitative risk assessment and scoring methodologies to support strategic and tactical risk-based decision-making. Lead and oversee risk assessments relating to existing and emerging technologies, services, projects, third parties, and significant organizational changes. Provide risk oversight, independent advice, and constructive challenge to IT, cybersecurity, business teams, and risk owners. Drive improvements to the organization’s risk posture by supporting the development of appropriate risk treatment plans, monitoring remediation activities, and assessing residual risk. Lead the continuous improvement of the IT and cybersecurity risk management framework, including risk identification, assessment, treatment, monitoring, escalation, and reporting. Establish and maintain effective relationships and communication channels with stakeholders involved in managing IT and cybersecurity risks across the organization.

Qualifications/Requirements

• Minimum of 12 years of total professional experience, including at least 7 years of relevant experience in IT and cybersecurity risk management, technology risk, IT audit and assurance, cybersecurity governance, governance, risk and compliance (GRC), cyber operations, or related consulting and advisory roles.
• Demonstrated experience in leading or coordinating enterprise-wide IT and cybersecurity risk management activities, including risk assessments, risk treatment oversight, governance committees, and senior management reporting.
• Bachelor’s degree in Information Technology, Audit or a related field Strong knowledge of cybersecurity and technology risk concepts, governance practices, risk assessment methodologies, and applicable regulatory, assurance, and industry requirements.
• Proven experience working in a complex global and matrixed organization and engaging effectively with senior IT, cybersecurity, business, audit, and risk stakeholders.
• Relevant professional certifications such as CRISC, CISA or ISO27001 LA is preferred.
• Strong knowledge of IT and cybersecurity risk management principles, methodologies, governance frameworks, and relevant regulatory requirements.
• Ability to identify, assess, prioritize, and clearly communicate the business impact of IT and cybersecurity risks.
• Strong analytical judgment and the ability to balance business objectives, security requirements, and risk exposure.
• Excellent communication, presentation, and facilitation skills, including the ability to communicate complex risk matters to senior leadership and governance committees.
• Strong stakeholder management and influencing skills, with the ability to drive ownership and accountability without direct authority.

About Amcor

Amcor is the global leader in developing and producing responsible consumer packaging and dispensing solutions across a variety of materials for nutrition, health, beauty and wellness categories. Our global product innovation and sustainability expertise enables us to solve packaging challenges around the world every day, producing a range of flexible packaging, rigid packaging, cartons and closures that are more sustainable, functional and appealing for our customers and their consumers. We are guided by our purpose of elevating customers, shaping lives and protecting the future. Supported by a commitment to safety, over 75,000 people generate $23 billion in annualized sales from operations that span over 400 locations in more than 40 countries.

NYSE: AMCR; ASX: AMC www.amcor.com | LinkedIn | YouTube