Technology Risk and Compliance Manager

Vermelo RPO; United Kingdom; Hybrid; GBP 75,000 - 95,000; Full time

Benefits offered by this job

25 days leave

Annual bonus

Private medical insurance

Life assurance 4x annual salary

Hybrid working

Modern offices

Job summary

Vermelo RPO is seeking a Technology Risk and Compliance Manager to shape and embed the organisation's technology risk strategy within the insurance sector. The role supports governance across technology delivery and business decisions, ensuring risk considerations are integrated.

You will drive risk identification, assessment and reporting, and partner with stakeholders to implement effective controls and risk mitigation in a hybrid working model with 2 days per week in offices across the UK.

Qualifications

• Experience in technology risk, IT risk management, or information security roles.
• Strong understanding of risk management frameworks and enterprise risk management principles.
• Strong ability to identify, assess, and prioritise risks based on likelihood and impact.
• Experience maintaining and analysing risk registers, metrics, and reporting.
• Ability to evaluate control effectiveness and residual risk.
• Strong communication skills, able to articulate risks in business-relevant terms.
• Ability to influence stakeholders and support risk-informed decision-making.

Responsibilities

• Identify, assess, and manage technology-related risks across infrastructure, applications, cloud services, and third-party providers.
• Maintain and operate the technology risk management framework with consistent risk identification, assessment and treatment.
• Ensure risks align with ERM processes and risk appetite.
• Track and manage risk registers, issues and remediation actions.
• Support governance with accurate and timely risk reporting.
• Develop risk metrics, KPIs, and KRIs.
• Escalate material risks through governance forums and committees.
• Document risk decisions, acceptances and mitigations.
• Support compliance with regulatory, legal and internal policies related to technology risk.
• Assess and manage risks with third-party technology providers.
• Provide expert advice to tech and business stakeholders on risk management.

Skills

Technology risk management

Information security

Risk assessment

Risk reporting

Stakeholder influence

Job description

Technology Risk and Compliance Manager

We have an exciting opportunity for an experienced Risk and Compliance manager to join an Information Security team within the insurance industry.

This is a hybrid role with the requirement to work 2 days a week from either our Manchester, Stoke, Chesterfield, Peterborough or Tunbridge Wells office.

Role Purpose

The Technology Risk Manager plays a pivotal role in shaping and embedding the organisation's technology risk strategy, ensuring that technology-related risks are effectively identified, assessed, and managed in alignment with the organisation's strategic objectives, risk appetite, and regulatory obligations.?

The role serves as a critical link between business strategy, technology delivery, and risk governance, translating complex risk exposures into actionable insights, control requirements, and risk mitigation strategies. Through effective challenge, influence, and collaboration, the Technology Risk Manager promotes a strong risk culture and ensures that risk considerations are embedded within key technology and business decisions.?

The position is accountable for maintaining visibility of technology risk exposure and ensuring appropriate mitigation and governance across the organisation.?

Key Accountabilities and Responsibilities

• Identify, assess, and manage technology-related risks, including risks arising from infrastructure, applications, cloud services, and third-party providers.?
• Maintain and operate the technology risk management framework, ensuring consistent risk identification, assessment, and treatment.?
• Ensure risks are assessed in line with enterprise risk management (ERM) processes and aligned to risk appetite.?
• Track and manage risk registers, issues, and remediation actions.?
• Support governance processes by providing accurate and timely risk reporting.?
• Develop and maintain risk metrics, KPIs, and KRIs.?
• Escalate material risks and issues through appropriate governance forums and committees.?
• Ensure clear documentation of risk decisions, acceptances, and mitigations.?
• Support compliance with regulatory, legal, and internal policies related to technology risk.?
• Assess and manage risks associated with third-party technology providers.?
• Provide expert advice to technology and business stakeholders on managing technology risk.?
• Translate technical risks into clear business impacts and recommendations.?
• Support initiatives to improve risk maturity, automation, and reporting capabilities.?

Skills, Experience and Knowledge

• Experience in technology risk, IT risk management, or information security roles.?
• Strong understanding of, technology risk management frameworks and methodologies and enterprise risk management principles?.
• Strong ability to identify, assess, and prioritise risks based on likelihood and impact.?
• Experience maintaining and analysing risk registers, metrics, and reporting.?
• Ability to evaluate control effectiveness and residual risk.?
• Strong communication skills, able to articulate risks in business-relevant terms.?
• Ability to influence stakeholders and support risk-informed decision-making.?

Benefits

• Starting with 25 days annual leave which increases with service
• Opportunity for a yearly bonus
• Private Medical Insurance
• Life Assurance 4x annual salary
• Collaborative, fast paced working environment
• Hybrid Working
• Modern, vibrant offices