Technology Controls Assurance Manager

Marks and Spencer; Salford; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A leading retail company in Salford is seeking a Technology Controls Assurance Manager to ensure the technology control environment operates efficiently and in compliance. The role involves managing controls assurance activities, identifying risks, and collaborating with various teams. Ideal candidates have strong knowledge of IT control frameworks and excellent communication skills. This position offers a hybrid work model and a variety of benefits.

Benefits

20% colleague discount

Competitive holiday entitlement

Discretionary bonus schemes

Defined Contribution Pension Scheme

Wide range of training programmes

Amazing perks via M&S Choices

Industry-leading parental and neonatal policies

Charity volunteer day

Qualifications

• Strong understanding of IT Control Frameworks and regulatory requirements.
• Experience in deploying GRC tooling.
• Ability to engage and collaborate with diverse partners.

Responsibilities

• Lead and implement controls assurance activities.
• Identify control gaps and provide actionable recommendations.
• Support audits and assessments of the technology control environment.

Skills

IT Control Frameworks (e.g. COBIT, NIST, ISO 27001)

Regulatory requirements (e.g. SOX, GDPR)

GRC tooling

Strong communication and relationship skills

Education

Professional qualification in CISA, CRISC or equivalent

Job description

Summary

The primary purpose of this role is to ensure the Digital & Technology environment adheres to control framework, regulatory requirements and industry standards. The role will focus on assessing, testing and improving technology controls to provide assurance over risk management and compliance posture.
To stay close to customers, our support teams are in the office three days a week as we believe that skills are developed through collaboration, and that spending time together makes us more creative and connected.

All the details

What's in it for you

Being a part of M&S is exactly that - playing your part to bring the magic of M&S to our customers every day. We're an inclusive, dynamic, exciting, and ever evolving business built on doing the right thing and bringing outstanding quality, value, service to every customer, whenever, wherever and however they want to shop with us.

Here are some of the benefits we offer that make working for M&S just that little bit more special

• After completing your probationary period, you'll receive 20% colleague discount across all M&S products and many of our third-party brands for you and a member of your household.
• Competitive holiday entitlement with the potential to buy extra holiday days!
• Discretionary bonus schemes awarded based on how you achieve your personal objectives and our performance as a business.
• A generous Defined Contribution Pension Scheme and Life Assurance.
• A dedicated welcome to our teams with a tailored induction and a wide range of training programmes to develop your skills.
• Amazing perks and discounts via our M&S Choices portal to maximise your financial and personal wellbeing.
• Industry-leading parental, adoption and neonatal policies, providing support and flexibility for your family.
• Access to a fantastic range of wellbeing support for all colleagues including access to our 24/7 Virtual GP and PAM Assist to support you and your family.
• A charity volunteer day to support a charity or cause you're passionate about through a dedicated day away from work.

#LI-Hybrid What you'll do

As the Technology Controls Assurance Manager, you'll play a meaningful role to ensure our technology control environment is operating efficiently to lead against our risk tolerance. You will:

• Lead and implement controls assurance activities, evaluating design and operational efficiency across applications, infrastructure and key processes.
• Identity control gaps and weaknesses, providing actionable recommendations to remediate and improve to mitigate risks.
• Craft and implement regular controls testing activities assure controls are operating as detailed.
• Support the Technology Controls Assurance Lead to develop and implement new controls in response to emerging risks.
• Partner with Internal Audit and Finance Risk & Controls to support internal / external audits and assessments of the technology control environment.

Who you are

• Strong understanding and knowledge of IT Control Frameworks (e.g. COBIT, NIST, ISO 27001) and regulatory requirements (e.g. SOX, GDPR).
• Strong understanding and knowledge of key technologies (Infrastructure, Cloud, Network etc.)
• Experience of using and deploying GRC tooling
• Change agent, with the ability to embed new ways of working and drive cultural improvements
• Strong communication and relationship skills with the ability to engage and collaborate with diverse partner, and ability to translate technical information to user-friendly language.
• Professional qualification in CISA, CRISC or equivalent.

Everyone's welcome

We are ambitious about the future of retail. We're redefining, innovating and leading the industry into a more conscientious, inspiring digital era. We're redefining how we work together and offering our most exciting opportunities yet. Marks & Spencer strives to be an inclusive organisation, trusted and admired by our colleagues, customers and suppliers. Join us and make change happen.

We are committed to building diverse and representative teams, where everyone can bring their whole selves to work and be at their best. We support each other and work together to win together.

If you feel you'd benefit from any support or reasonable adjustments during any stage of the recruitment process, please don't hesitate to let us know when completing your application. This information will be picked up by our team, so we can try and put steps in place to help you be at your best through this process.

#LI-OT1