risk and controls manager

Sanderson; Greater London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A financial services organization in Greater London is seeking an IT Risk & Governance Lead who will take ownership of their IT risk and control framework. The role involves strengths like enhancing governance, communicating risk postures, and leading control gap remediation efforts. The candidate should have experience within regulated environments and a strong background in IT Risk and Governance. This position offers a hybrid working model with flexibility.

Qualifications

• Experience in enhancing IT risk and control frameworks.
• Background in regulated environments preferred, especially in Financial Services.
• Ability to lead control remediation plans.

Responsibilities

• Own and evolve the IT risk and control framework.
• Lead attestation cycles and identify control gaps.
• Strengthen governance forums and reporting to senior leadership.

Skills

IT Risk experience

IT Governance

Operational autonomy

Communication skills

Job description

We’re supporting a regulated organisation in appointing an IT Risk & Governance Lead to take ownership of risk and controls across their technology function.

This is a high-impact role reporting directly to senior IT leadership, responsible for strengthening and maturing the IT risk framework across multiple technology pillars, including Security,

Operations, Strategy and Vendor Management.

The framework is in place — what’s needed now is someone who can enhance governance, drive clarity, formalise oversight, and ensure strong alignment with enterprise risk and regulatory (FCA) expectations.

🔎 What You’ll Be Doing:

• Owning and evolving the IT risk & control framework
• Leading attestation cycles and control gap remediation plans
• Strengthening governance forums and reporting
• Partnering with senior IT leaders and Risk Assurance
• Ensuring clear communication of risk posture to leadership
• Strong IT / Technology Risk or IT Governance experience
• Background in regulated environments (Financial Services desirable)
• Ability to operate autonomously and drive accountability
• Practical, hands-on mindset when required

This is a highly collaborative role suited to someone resilient, commercially aware, and comfortable influencing across a complex IT landscape.

Hybrid working model (typically 1–2 days per fortnight in office).

If you’re immediately available or open to an FTC opportunity where you can genuinely shape and elevate IT risk governance, I’d love to speak with you!