Senior Manager, IT Risk and Controls

Drive the evolution of IT Risk Management from a static framework into a living system that supports modern delivery models, emerging technologies, and real operational insights.

This company is seeking a Senior Manager (IT Risk & Controls) to lead technology risk, governance, and strategic decision-making across the IT Division. You'll modernise risk practices, influence senior leaders, and position risk management as an enabler of innovation, resilience, and business performance.

Key responsibilities:

• Shape Technology Risk Practices: Modernise risk assessments for cloud architectures, Agile/DevSecOps models, cyber resilience, and emerging technologies. Shift from static controls to outcome-driven practices
• Refine Control Assessments: Manage the Technology Control Library to ensure controls are relevant, proportionate, and enable innovation. Develop Key Risk Indicators (KRIs) that provide actionable insights
• Turn Data into Insights: Create dashboards highlighting trends and trade-offs. Translate technical vulnerabilities into business impacts to guide leadership decisions
• Drive Learning from Incidents: Analyse incidents to identify systemic issues and implement targeted improvements to prevent recurrence
• Influence and Build Capability: Act as a trusted advisor to senior leaders, mentor junior practitioners, and enhance the overall capability of the IT Risk & Controls function

Candidate profile:

• Bachelor's degree in a relevant field (e.g., Operational Risk Management, Information Security). Certifications like ISO 31000, CISA, or CRISC are advantageous
• 10+ years' experience in technology or operational risk management with expertise in designing and leading modern risk frameworks
• Strong background in control assessment methodologies with a focus on modernisation
• Proven ability to influence outcomes in complex environments and build operational risk functions within IT organisations
• Deep understanding of technology risks, control design, operational resilience, enterprise architecture, service management, data governance, and system migrations
• Proficiency with GRC tools and creating insightful dashboards
• Excellent analytical skills with strong written/verbal communication abilities

About the company:

A leading organisation is recognised for delivering large-scale services and driving innovation through technology and operational excellence. Join a collaborative, forward-thinking environment where you can contribute to meaningful transformation and grow your career.

Keywords: IT risk manager, technology risk management, IT governance, risk and controls, operational risk

What's next:

Lead the future of technology risk by enabling innovation, resilience, and smarter business decisions. Apply now!