Senior IT Risk Manager | GRC, Cyber & AI Risk

AVEVA Group; Cambridge; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Flexible benefits fund

emergency leave days

adoption leave

28 days annual leave

pension

life cover

private medical insurance

parental leave

education assistance program

Job summary

AVEVA is seeking an IT Risk - Senior Manager to lead risk governance and remediation across IT. You will partner with Enterprise Risk Management and Security Risk teams to set policies, track risks, and report to IT Leadership. Hybrid role with 50% in office in the UK high-tech environment.

The role demands 10+ years in IT risk, strong leadership, and a deep knowledge of core risk domains, cloud, and resilience. You will drive robust risk reporting using Riskonnect and BI tools.

Qualifications

• Demonstrated technology risk, IT GRC, cyber risk, or IT audit experience in a tech-led org.
• 10+ years across IT and security in global environments.
• Deep knowledge of IAM/PAM, vulnerability, patch, cloud risk and incident learnings.
• Strong leadership with clear, concise presentation skills.
• Experience working with SOX and NIST frameworks is preferred.

Responsibilities

• Develop governance materials for IT Leadership, ERM, and Security Risk forums.
• Evaluate new risks and assess impact to business and IT with treatment plans.
• Align IT, security and ERM on risk capture, scoring, and reporting.
• Provide risk escalation guidance and proactive risk tracking using standard tooling.
• Ensure risks from audits, projects, incidents are raised and managed.
• Lead IT Risk Management training and mature risk appetite metrics.

Skills

IT risk

GRC

Cyber security

Regulatory compliance

Leadership

Tools

Riskonnect

Excel

PowerPoint

BI tools

Job description

AVEVA is seeking an IT Risk - Senior Manager to lead risk governance and remediation across IT. You will partner with Enterprise Risk Management and Security Risk teams to set policies, track risks, and report to IT Leadership. Hybrid role with 50% in office in the UK high-tech environment.

The role demands 10+ years in IT risk, strong leadership, and a deep knowledge of core risk domains, cloud, and resilience. You will drive robust risk reporting using Riskonnect and BI tools.