Canopius Group
Governance and Controls Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Governance and Controls Lead
IT Governance and Controls Lead
About the Role
The IT Governance and Controls Lead is responsible for the operation and continuous improvement of IT governance and control activities across the Technology function. Reporting to the IT Governance & Quality Manager, the role ensures that IT controls are clearly defined, effectively embedded, and operating as intended in line with regulatory, risk, and organisational requirements.
The role provides subject-matter expertise on IT governance and controls, supports audit and assurance activities, and works closely with Technology, Risk, Compliance, and Audit stakeholders to maintain a strong and sustainable IT control environment.
Responsibilities
IT Governance & Controls
- Support the implementation and ongoing operation of the IT governance framework, policies, standards, and procedures.
- Own and maintain IT control documentation, including control descriptions, evidence requirements, and operating procedures.
- Monitor the effectiveness of IT controls, identifying gaps, weaknesses, and opportunities for improvement.
- Support the identification, assessment, and mitigation of IT-related risks.
- Provide guidance and advice to Technology teams on governance and control requirements.
Audit & Assurance Support
- Support internal and external IT audits, acting as a key contributor to audit planning, evidence collation, and walkthroughs.
- Coordinate responses to audit queries and track audit actions through to remediation and closure.
- Ensure audit findings and control issues are clearly documented, prioritised, and followed up.
- Contribute to audit reporting and management information for senior stakeholders.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Attestation, Compliance & Reporting
- Support the annual IT attestation and compliance processes across the organisation.
- Ensure timely completion of governance and control activities by relevant stakeholders.
- Produce and maintain governance, control, and KPI reporting at operational, management, and executive levels.
- Provide insights and analysis on control performance, risks, and trends.
Stakeholder Engagement
- Work closely with Technology teams, Risk, Compliance, and Audit to embed effective governance and controls.
- Act as a trusted point of contact for governance and control-related queries.
- Support the Head of IT Governance with analysis, reporting, and governance insights.
Continuous Improvement
- Identify opportunities to simplify, streamline, and improve governance and control processes.
- Support the adoption of best practice frameworks and standards (e.g. ITIL, COBIT, ISO).
- Contribute to initiatives that strengthen control maturity and reduce operational risk across IT.
Requirements
Skills and Experience
- Experience in IT governance, IT controls, IT risk, audit, or assurance roles.
- Strong understanding of IT control environments, particularly within regulated organisations.
- Experience supporting internal and external audits.
- Strong analytical, documentation, and reporting skills.
- Ability to work independently while collaborating effectively with a wide range of stakeholders.
- Excellent written and verbal communication skills.
- Knowledge of governance frameworks and standards (e.g. ISO 27001, ISO 20000, COBIT, ITIL).
- Experience supporting attestation or compliance processes.
- Experience in financial services or similarly regulated environments.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Our Benefits
About Canopius
We offer all employees a comprehensive benefits package focused on whole-wellbeing, including:
- Hybrid working
- Competitive base salary
- Non-contributory pension
- Discretionary bonus
- Insurances including health (family) and dental cover
- Financial, physical, social, and psychological health support
Canopius Vision
Canopius is a global specialty lines (re)insurer, one of the leading insurers in the Lloyd’s of London insurance market, with offices in the UK, US, Singapore, Australia, and Bermuda.
We uphold a distinctive and positive culture where employees can bring their whole selves to work, fostering personal and professional growth while delivering profitable, sustainable results.
Joining our flexible, hybrid working model in new City of London offices, employees enjoy an environment that challenges them to be their best and recognises diverse contributions.
Our Commitment to Inclusion
Canopius is committed to equal employment opportunities and provides a work environment free of discrimination and harassment. We ensure fair treatment regardless of:
- Age
- Sex and gender identity
- Ethnicity
- Disability
- Sexual orientation
- Socio-economic background
- Religion or beliefs
- Marital or caring status
We make reasonable adjustments throughout the recruitment process and during employment.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills