Senior IT Risk Leader — Cyber, GRC & Strategy (Hybrid)

OSIsoft, LLC; Hartford; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

AVEVA is seeking an IT Risk Senior Manager to lead a robust risk lifecycle for IT, guiding risk identification, assessment, treatment, and reporting within a technology-led environment. You will collaborate with Enterprise Risk Management and Security Risk teams, maturing risk frameworks and dashboards to support executive decisions.

Ideal candidates bring 10+ years in IT risk and GRC, strong leadership, and experience with Riskonnect and regulatory frameworks.

Qualifications

• Demonstrable experience in technology risk, IT GRC, cyber risk, operational risk, or IT audit within a technology-led organisation.
• Minimum of 10 years' experience across IT and Security in global environments.
• Strong knowledge of tech and cyber risk domains: IAM/PAM, vulnerability management, secure configuration, cloud risk, logging/monitoring, DR and resilience, change/release risk.
• Excellent leadership with ability to present articulately and concisely.
• Strong communication skills and ability to coordinate cross-functional workshops.
• Familiarity with regulatory frameworks such as SOX and NIST; Riskonnect experience preferred.

Responsibilities

• Responsible for IT Risk Management and adherence to the Enterprise Risk Management Framework and Taxonomy.
• Produce governance materials for IT Leadership, Enterprise Risk Management and Security Risk forums.
• Evaluate new risks and identify impact to business and IT and develop treatment plans.
• Drive alignment between IT, Security and Enterprise Risk Management on risk capture, scoring and reporting.
• Provide risk escalation management and guidance.
• Proactively track IT Risks and treatment plans using standard tooling and a clear framework.
• Ensure IT risks are raised, understood and managed from audits, projects and BAU activities.
• Keep IT Policy and operating procedures up to date; lead IT Risk Management training.
• Mature IT Risk Appetite Metrics, KRIs and KPIs with dashboards for reporting.
• Identify AI use cases to improve risk management processes and collaboration.

Skills

Leadership

Communication

IT GRC

Risk management

Stakeholder management

Regulatory knowledge SOX/NIST

Risk analytics

AI risk

Presentation skills

Cross-functional collaboration

Tools

Riskonnect

BI/reporting tools

Excel

PowerPoint

Job description

AVEVA is seeking an IT Risk Senior Manager to lead a robust risk lifecycle for IT, guiding risk identification, assessment, treatment, and reporting within a technology-led environment. You will collaborate with Enterprise Risk Management and Security Risk teams, maturing risk frameworks and dashboards to support executive decisions.

Ideal candidates bring 10+ years in IT risk and GRC, strong leadership, and experience with Riskonnect and regulatory frameworks.