Senior Manager Information Security

Digital Waffle; United Kingdom; Remote; GBP 76,500 - 93,500; Full time

Job summary

A leading consulting firm is seeking a seasoned Senior Risk and Controls Manager to work remotely in the United Kingdom. The ideal candidate will possess deep expertise in Governance, Risk and Compliance (GRC), particularly with SAP environments. Key responsibilities include developing control frameworks, advising senior stakeholders, and leading a team. This role prioritizes strategic business growth alongside compliance, making excellent leadership and communication skills essential. Competitive salary up to £85,000 plus bonus offered.

Qualifications

• Extensive experience designing, implementing, and testing GRC controls, ideally within SAP ERP landscapes.
• Solid understanding of financial compliance frameworks, including SOX and UK Corporate Reform.
• Proven ability to lead engagements and communicate clearly with senior management.

Responsibilities

• Develop and implement internal control frameworks.
• Act as a lead advisor on GRC strategy and compliance requirements.
• Lead and support junior consultants and analysts.
• Contribute to business development activities.
• Build strong client relationships.

Skills

Designing GRC controls

Implementing GRC controls

Testing GRC controls

IT General Controls

IT Application Controls

Communication skills

Analytical skills

Organizational skills

Mentoring

Education

Professional qualifications (CISA, ACA, ACCA)

Job description

Senior Risk and Controls Manager - Remote - Up to £85,000 + Bonus

My client is looking for a seasoned Controls professional with deep expertise in Governance, Risk and Compliance (GRC), particularly within SAP-based environments. This role suits someone who understands how effective controls support both regulatory compliance and wider business objectives, and who is confident advising senior stakeholders on risk, controls, and governance matters.

Key Responsibilities

• Develop, implement, and evaluate internal control frameworks, with a strong focus on SAP-enabled systems.
• Act as a lead advisor in client discussions covering GRC strategy, compliance requirements, and optimisation of control environments, including ITGCs, ITACs, and key ICFR controls.
• Provide subject matter expertise on regulatory obligations such as Sarbanes-Oxley (SOX) and UK Corporate Reform (Provision 29), translating requirements into practical, value-driven solutions.
• Lead, coach, and support junior consultants and analysts, fostering a collaborative and high-performing team culture.
• Contribute to business development activities, including opportunity scoping, proposal writing, and participation in client pitches across the sales lifecycle.
• Build and maintain strong, long-term client relationships, positioning yourself as a trusted advisor in controls and compliance.

Core Behaviours

• Focused on the purpose and value behind solutions, not just their technical execution.
• Strong client-first mindset, with a proven ability to align work to client priorities.
• Passionate about evolving risk and controls into a function that enables business growth rather than just compliance.
• Confident in building effective relationships with stakeholders at all levels, both internally and externally, in a hybrid working environment.

Skills & Experience

• Extensive experience designing, implementing, and testing GRC controls, ideally within SAP ERP landscapes.
• Strong background in IT General Controls (ITGCs) and IT Application Controls (ITACs).
• Solid understanding of financial compliance frameworks, including SOX and UK Corporate Reform (Provision 29).
• Knowledge of core finance processes and related ICFR controls.
• Proven ability to lead engagements and communicate clearly with senior management.
• Experience managing and mentoring team members.
• Exposure to the consulting sales cycle, including bid support and opportunity development.
• Excellent analytical, communication, and organisational skills.
• Professional qualifications such as CISA, ACA, ACCA, or similar.
• Background in risk advisory, internal controls, or a top-tier consulting environment.
• Experience with emerging risk and controls capabilities, including automation, data analytics, and AI-driven solutions.