Strategic IT Risk & Cyber Controls Lead

Audit & Risk Recruitment; Birmingham; Hybrid; GBP 65,000 - 85,000; Full time

Job summary

Audit and Risk Recruitment in Birmingham is partnering with a FTSE 30 business to recruit an IT Risk and Cyber Controls advisor. You’ll lead the development of a forward-thinking risk and controls framework, with autonomy to shape IT risk across the organisation and align with regulatory expectations.

The role collaborates with IT and business units to embed strong IT controls, cyber culture, and governance. Hybrid working with a Birmingham office presence is expected.

Qualifications

• Experience in IT Risk, Audit, or Governance.
• Knowledge of control frameworks (IT SOX, ICFR, UK Corporate Governance Code).
• Strong understanding of IT controls (access, change, operations).
• Cyber controls experience/exposure to frameworks such as NIST, COBIT, and ISO27001.
• Experience in complex or decentralised environments.
• Excellent communication and ability to challenge constructively.

Responsibilities

• Lead design and implementation of IT Controls, Cyber controls, and IT Risk framework from the ground up.
• Embed a risk culture aligned with regulatory standards and robust internal controls.
• Strengthen governance through policies, standards, and control documentation.
• Monitor control effectiveness and drive remediation of deficiencies.
• Lead monthly IT control reporting and governance forums.
• Provide oversight across key cyber domains (DR, BCP, vulnerability management).
• Support Internal Audit and external assurance activity.
• Deliver insight on emerging risks and continuous improvement opportunities.

Skills

IT Risk

Audit

Governance

IT SOX

ITGCs

Cyber controls

NIST/COBIT/ISO27001

Communication

SAP

Copilot/ChatGPT

Tools

SAP

Copilot

ChatGPT

Job description

Audit and Risk Recruitment in Birmingham is partnering with a FTSE 30 business to recruit an IT Risk and Cyber Controls advisor. You’ll lead the development of a forward-thinking risk and controls framework, with autonomy to shape IT risk across the organisation and align with regulatory expectations.

The role collaborates with IT and business units to embed strong IT controls, cyber culture, and governance. Hybrid working with a Birmingham office presence is expected.