Technology Risk and Compliance Manager

Markerstudy Group; Salford; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

25 days annual leave

Yearly bonus

Private Medical Insurance

Life Assurance 4x annual salary

Hybrid Working

Modern, vibrant offices

Job summary

Markerstudy Group seeks an experienced Technology Risk Manager to lead technology risk, governance, and compliance within its Information Security team in the insurance sector. The role is hybrid, requiring 2 days a week in our offices (Manchester, Stoke, Chesterfield, Peterborough or Tunbridge Wells).

You will translate complex tech risks into actionable business insights and drive risk mitigation across technology and business decisions.

Qualifications

• Experience in technology risk, IT risk management, or information security roles.
• Strong understanding of risk management frameworks and ERM principles.
• Ability to identify, assess, and prioritise risks by likelihood and impact.
• Experience maintaining risk registers, metrics, and reporting.
• Ability to evaluate control effectiveness and residual risk.
• Excellent communication to articulate risks in business terms.
• Ability to influence stakeholders and support risk-informed decision-making.

Responsibilities

• Identify, assess, and manage technology-related risks across infrastructure, apps, cloud, and third parties.
• Maintain the technology risk management framework and ensure consistent risk treatment.
• Align risk assessments with ERM processes and risk appetite.
• Track risk registers, issues, and remediation actions.
• Provide risk reporting to governance forums.
• Develop risk metrics, KPIs, and KRIs.
• Escalate material risks through governance committees.
• Document risk decisions, acceptances, and mitigations.
• Support compliance with regulatory, legal, and internal policies on tech risk.
• Translate technical risks into business impacts and recommendations.
• Support initiatives to improve risk maturity, automation, and reporting capabilities.

Skills

Tech risk experience

ERM framework knowledge

Risk assessment & prioritisation

Risk registers & reporting

Control effectiveness evaluation

Communication skills

Stakeholder influence

Job description

We have an exciting opportunity for an experienced Risk and Compliance manager to join an Information Security team within the insurance industry.

This is a hybrid role with the requirement to work 2 days a week from either our Manchester, Stoke, Chesterfield, Peterborough or Tunbridge Wells office.

Role Purpose

The Technology Risk Manager plays a pivotal role in shaping and embedding the organisation's technology risk strategy, ensuring that technology-related risks are effectively identified, assessed, and managed in alignment with the organisation's strategic objectives, risk appetite, and regulatory obligations.

The role serves as a critical link between business strategy, technology delivery, and risk governance, translating complex risk exposures into actionable insights, control requirements, and risk mitigation strategies. Through effective challenge, influence, and collaboration, the Technology Risk Manager promotes a strong risk culture and ensures that risk considerations are embedded within key technology and business decisions.

The position is accountable for maintaining visibility of technology risk exposure and ensuring appropriate mitigation and governance across the organisation.

Key Accountabilities And Responsibilities

• Identify, assess, and manage technology-related risks, including risks arising from infrastructure, applications, cloud services, and third-party providers.
• Maintain and operate the technology risk management framework, ensuring consistent risk identification, assessment, and treatment.
• Ensure risks are assessed in line with enterprise risk management (ERM) processes and aligned to risk appetite.
• Track and manage risk registers, issues, and remediation actions.
• Support governance processes by providing accurate and timely risk reporting.
• Develop and maintain risk metrics, KPIs, and KRIs.
• Escalate material risks and issues through appropriate governance forums and committees.
• Ensure clear documentation of risk decisions, acceptances, and mitigations.
• Support compliance with regulatory, legal, and internal policies related to technology risk.
• Assess and manage risks associated with third-party technology providers.
• Provide expert advice to technology and business stakeholders on managing technology risk.
• Translate technical risks into clear business impacts and recommendations.
• Support initiatives to improve risk maturity, automation, and reporting capabilities.

Skills, Experience And Knowledge

• Experience in technology risk, IT risk management, or information security roles.
• Strong understanding of, technology risk management frameworks and methodologies and enterprise risk management principles .
• Strong ability to identify, assess, and prioritise risks based on likelihood and impact.
• Experience maintaining and analysing risk registers, metrics, and reporting.
• Ability to evaluate control effectiveness and residual risk.
• Strong communication skills, able to articulate risks in business-relevant terms.
• Ability to influence stakeholders and support risk-informed decision-making.

Benefits

• Starting with 25 days annual leave which increases with service
• Opportunity for a yearly bonus
• Private Medical Insurance
• Life Assurance 4x annual salary
• Collaborative, fast paced working environment
• Hybrid Working
• Modern, vibrant offices