Senior IT Risk & Controls Lead | Hybrid + Flexible

Csod; Eastleigh; Hybrid; GBP 59,000 - 89,000; Full time

Benefits offered by this job

Flexible Working

Health Insurance

Annual Bonus

Pension Plan

Wellbeing Activities

Job summary

Ageas is seeking an experienced IT Risks & Controls Manager to join the Governance, Risk and Compliance team. You will own the IT risk register, assess controls and lead risk discussions across technology, reporting to the GRC Lead.

This senior role requires knowledge of ISO/IEC 27001 and NIST-aligned controls, experience with GRC tools, and the ability to translate technical risk into clear, decision-ready insights for governance forums.

Qualifications

• Strong experience in IT risk management, technology risk or information security risk.
• Good knowledge of IT control frameworks, ISO/IEC 27001 and NIST-aligned controls.
• Experience maintaining IT risk registers and working with GRC tools.
• Confidence facilitating senior stakeholder discussions and governance meetings.
• Ability to translate technical risk and control issues into clear, decision-ready insight.
• A pragmatic, structured and risk-based approach, with strong attention to detail.

Responsibilities

• Lead IT risk and control assessments using recognised frameworks such as ISO/IEC 27001 and NIST-aligned controls.
• Own and maintain the IT risk register, ensuring risks, controls and treatment plans are accurate and up to date.
• Assess the design and effectiveness of IT controls and support timely remediation, acceptance or escalation of risks.
• Facilitate IT risk meetings with senior technology leaders, providing clear insight and practical recommendations.
• Produce meaningful risk reporting covering trends, control effectiveness and key issues for governance forums.
• Support internal and external audits by providing evidence aligned to recognised control frameworks.
• Work with Security Architecture, Engineering and Operations teams to ensure risks are managed through effective, proportionate controls.

Skills

IT risk management

Technology risk

Information security risk

IT control frameworks

GRC tools

Stakeholder facilitation

Risk-based approach

Education

ISO 27001 Lead Implementer/Auditor

Job description

Ageas is seeking an experienced IT Risks & Controls Manager to join the Governance, Risk and Compliance team. You will own the IT risk register, assess controls and lead risk discussions across technology, reporting to the GRC Lead.

This senior role requires knowledge of ISO/IEC 27001 and NIST-aligned controls, experience with GRC tools, and the ability to translate technical risk into clear, decision-ready insights for governance forums.