Job Description

A new and exciting opportunity has arisen with a key client of ours. This exciting position plays a key role in shaping and overseeing the IT risk and control framework within our Technology function.Key skills required for this roleIT Risk, Risk Management, NIST, ITILImportantIT Risk, Risk Management, NIST, ITILJob descriptionTeam: Information Security
Work Arrangement: Hybrid - 2 days per week based in either our London, Bournemouth or Stockport offices.
Hours: Full-time, 35 hours per weekAbout the Role:This exciting position plays a key role in shaping and overseeing the IT risk and control framework within our Technology function. You'll champion a proactive approach to risk, promoting awareness and accountability throughout the tech teams. In this role, you'll drive IT risk initiatives, deliver regular insights to senior stakeholders, and oversee audits, general controls, and risk assessments. Collaboration is crucial - you'll work closely with Information Security, Group Risk, and both internal and external audit teams. You'll also support policy alignment, evaluate control effectiveness, and advise on enhancements to risk controls.Key Responsibilities:Develop, implement, and manage the IT Risk Management Framework
Maintain an up-to-date IT Risk Register
Oversee the creation and tracking of risk mitigation plans
Provide clear, regular risk updates to IT leadership
Foster a risk-aware mindset across all areas of Technology
Assess and recommend investments to reduce identified IT risks
Track and resolve IT risk incidents, ensuring timely closure
Monitor for emerging IT risks and incorporate them into planning and decision-making
Liaise with Group Risk, Audit, and Compliance to ensure IT risks are aligned with company-wide risk appetite
Offer practical, cost-effective solutions for mitigating identified risks
Support the development and implementation of risk policies, standards, and procedures
Lead quarterly IT risk assessments
Engage in comprehensive risk remediation planning and monitoring
Coordinate internal and external IT audits, ensuring strong collaboration with auditors
Oversee an ongoing Controls Assurance program focused on IT General Controls
Plan and manage Disaster Recovery exercises, analyzing and reporting on outcomesWhat You'll Need to Succeed:Familiarity with frameworks like ITIL, ISO27001, NIST CSF, and Disaster Recovery planning
Strong interpersonal and communication skills
Ability to manage time effectively and juggle multiple priorities
Proficiency with Microsoft Office tools and data reporting
Hands-on experience with IT risk management tools and systems
Ability to build, implement, and train users on risk management platformsWhat's in It for You?Performance Bonuses - Be recognized and rewarded for your hard workGenerous Pension - We'll match your contributions up to 6%, with potential to reach 12%

• Health Insurance - Enjoy access to our award-winning health plan plus rewards

Life Assurance - Protection for you and your loved ones, worth 4x your annual salary

Matchtech Group