Technology Risk and Controls manager (12 month FTC)

Audit & Risk Recruitment; Greater London, Manchester; On-site; GBP 70,000 - 90,000; Full time

Job summary

Audit & Risk Recruitment is partnering with a globally recognised brand to appoint a Technology Risk and Controls Manager. You will shape IT risk, audit, and compliance across an international tech landscape undergoing rapid transformation.

In this hybrid London or Manchester role, you will lead GRC initiatives, guide complex change, and influence senior leaders while working across multi-entity environments. Visa sponsorship is not available.

Qualifications

• Technology Risk and Controls experience (1st/2nd line)
• Strong stakeholder management with senior leadership
• Experience in a large, global organisation
• Knowledge of cyber risk frameworks (COBIT, NIST) and IT control environments
• Understanding of cloud-enabled environments and ERP systems
• Excellent communication and influencing skills
• Strong knowledge of Oracle Fusion
• Familiarity with ISO 27001, NIST, CIS, PCI-DSS
• Professional certifications such as CISA, CISSP, or CISM

Responsibilities

• Lead the design, implementation, and continuous improvement of the Risk and Control matrix using NIST/COBIT/ISO and other GRC frameworks
• Guide the business through complex change and transformation initiatives
• Drive technology risk and compliance strategy across global technology functions
• Work in a cloud-enabled environment, aligning technical and non-technical stakeholders
• Act as a trusted advisor to senior leadership influencing strategic risk decisions
• Establish and embed a robust IT risk management framework aligned to business risk appetite
• Oversee third-party/vendor risk assurance and regulatory alignment
• Build relationships with internal/external audit teams and global stakeholders
• Deliver regular reporting and insights to executive leadership and group stakeholders

Skills

Technology Risk experience

Stakeholder management

Global organisation exposure

Cyber risk frameworks

Cloud/ERP understanding

Communication/Influencing

Oracle Fusion

ISO27001/NIST/CIS/PCI-DSS

Professional certifications (CISA/CIS"

Job description

Audit & Risk Recruitment are partnering with an instantly recognisable global brand to hire a Technology Risk and Controls Manager. This is a high-impact role where you’ll shape and embed IT risk, audit, and compliance frameworks across an international technology landscape going through rapid change and transformation.

You’ll act as a subject matter expert in IT Risk, Change and transformation, Cyber controls (NIST, COBIT, ISO etc), influencing senior stakeholders and driving a strong risk-aware culture across a complex, multi-entity business. The business is going through a crucial merger, with a successful candidate gaining exposure across non-BAU environments and leading across Technology Risk and Control initiatives for the company.

Overview

• 2 days in office hybrid working policy (London or Manchester)
• 12 month FTC with highly likely extension/move into the business
• Unfortunately this role cannot provide visa sponsorship

Key Responsibilities

• Lead the design, implementation, and continuous improvement of the Risk and Control matrix, working with NIST, COBIT ISO and other information security GRC frameworks
• Guide the business through complex change and transformation initiatives
• Drive the Technology risk, and compliance strategy across global technology functions
• Work in a Cloud enabled environment, understanding the relationship between technical and non-technical stakeholders across the business
• Act as a trusted advisor to senior leadership, influencing strategic risk decisions
• Establish and embed a robust IT risk management framework aligned to business risk appetite
• Oversee third-party/vendor risk assurance, ensuring compliance with regulatory standards
• Build strong relationships with internal/external audit teams and global stakeholders
• Deliver regular reporting and insights to executive leadership and group stakeholders

Background

• Experience in Technology Risk and Controls (1st, 1.5 or 2nd line)
• Strong stakeholder management skills, with experience engaging senior leadership
• Experience working in a large, global organisation
• Knowledge of cyber risk frameworks (e.g., COBIT, NIST) and IT control environments
• Understanding of cloud enabled environments and ERP systems
• Excellent communication and influencing skills
• Strong knowledge of Oracle Fusion
• Familiarity with frameworks such as ISO 27001, NIST, CIS, PCI-DSS
• Professional certifications such as CISA, CISSP, or CISM