Technology Controls Assurance Manager

Tesco Insurance & Money Services; City of Edinburgh; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A leading financial services firm in Edinburgh is seeking a Technology Controls Assurance Manager to provide leadership in risk management and control oversight. The role requires strong communication and influencing skills to engage key stakeholders effectively. Responsibilities include coordinating control activities and providing consultancy on control design. The position offers a competitive salary starting from £54,600 plus benefits and requires hybrid working, with office attendance expected two days a week.

Benefits

Colleague pension scheme

Private healthcare & virtual GP service

Performance-related annual bonus

Generous holiday allowance

Colleague Clubcard discount

Green car leasing scheme

Qualifications

• Strong influencing skills to challenge key stakeholders effectively.
• Experience in assurance activity of key controls, including control testing.
• Practice in policy and standards reviews.

Responsibilities

• Own and operate control oversight activities and the annual testing schedule.
• Provide consultancy on control design and operating practices.
• Support stakeholders in making risk-based decisions.

Skills

Strong communication skills

Effective planning and organisation

Risk identification and management

Analytical problem-solving

Stakeholder engagement

Education

Relevant ISACA qualification (CISM, CRISC, CISA, CISSP)

Job description

About the role

Tesco Insurance • Edinburgh – 2 South Gyle Crescent, Edinburgh, EH12 9FQ, United Kingdom Permanent Salary – from £54,600 plus annual bonus & benefits Work Level – 2 Location – Edinburgh Office Attendance – Hybrid; you should be able to work in our offices 2 days per week Closing date – Monday 15th December 2025

Opportunity

We’re looking for a Technology Controls Assurance Manager to join our Insurance Money and Services team. The purpose of Technology Controls is to provide controls and risk‑management leadership enabling colleagues to make the right decision. You’ll provide oversight of the Technology Controls Library, supporting key stakeholders by providing expert guidance based on analytical outcomes and insight surrounding the operation of the control environment, ultimately supporting the evolution and maturity of the risk and control profile.

The Role

• Own, co‑ordinate and operate a variety of control oversight activities, including the delivery of scheme attestations and the annual control testing schedule.
• Research, transform and improve on existing practices.
• Coordinate and drive responses to attestation and due‑diligence requirements.
• Provide consultancy and expertise on control design and operating practices.
• Inform and support key stakeholders to make risk‑based decisions.

We need you to have (min exp)

• Strong communication skills & good influencing skills to positively challenge and enable key stakeholders if anyone is discharging their accountabilities in relation to risk management.
• Effective planning, organisation, prioritisation skills to efficiently meet business objectives.
• Works to monitor, interpret and understand policies and procedures, while making sure they match our strategies and objectives.
• Explores the depth and breadth of a problem, draws out the implications of not changing, and helps clients self‑discover and articulate the value of a solution.
• Seeks to understand the client’s situation, explores client problems and solutions, and can design solutions for resolution.
• Identifies, assesses, prioritises and manages risk.
• Analyses potential solutions and creates recommendations based on the expected benefits, costs and overall value of the solution for key stakeholders.
• Works at an advanced level to understand business context, needs, rules and architecture, as well as our organisational structure.
• Experience in assurance activity (including control testing) of key controls.
• Review, assessment and remediation of access‑management related controls.
• Experience of cyber related risks and issues (leveraging NIST framework).
• Practised in policy, standards and process reviews and adherence of first‑line of defence teams to these.

And if you have any of these, even better

• Ideally, you hold a relevant or equivalent ISACA qualification (CISM, CRISC, CISA, CISSP) or be willing to work towards this.

Benefits

• Prepare for your retirement with our colleague pension scheme.
• Private healthcare & virtual GP service for you and your family 365 days a year.
• Performance‑related annual bonus.
• Generous holiday allowance – minimum 7.2 weeks, with the opportunity to buy more.
• Colleague Clubcard, enjoy a 10% discount that increases to 15% every payday (worth up to £2K). A second card can be shared with someone else.
• Green car leasing scheme.
• Critical illness cover.
• Family‑oriented initiatives: enhanced maternity leave pay, shared parental leave policy and generous 8‑week paid paternity leave.
• Take part in our Buy As You Earn and Save As You Earn share schemes.

Everyone’s welcome

We want all colleagues to feel welcome and be themselves. We’re committed to building a more inclusive workplace, celebrating everything that makes us unique and valuing the richness and diversity this brings.

Additional Information

We also know the importance of balancing work with life’s other commitments. Please talk to us at interview about the flexibility you need, as we’re committed to exploring part‑time and flexible working opportunities at every level of the organisation.

Interviews commencing

December 2025.

How to apply

We value our people and diverse teams and believe the variety of backgrounds and experiences make us stronger to achieve our goals. If you’re interested in finding out more about what a career at Tesco Insurance and Money Services looks like, click apply to find out more!