Audit & Risk Recruitment
IT Risk and Cyber Controls specialist
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Audit and Risk Recruitment
IT Risk & Cyber Controls Specialist
Salary: Circa £50,000-60,000 plus 20% bonus
Location: Birmingham office
Working Model: 3 days per week hybrid
Sponsorship: Unfortunately, this role cannot sponsor at this time.
Audit and Risk Recruitment are delighted to be partnering with a FTSE 30 business to recruit an IT Risk and Cyber Controls advisor. This is a rare opportunity to join a high-performing, forward-looking organisation at a pivotal stage of its IT and governance evolution.
About the Role
We're looking for a strategic and proactive IT Risk and Cyber Controls advisor to help lead the development of a forward-thinking risk and controls framework. This role offers significant autonomy and influence and you’ll have the opportunity to shape the direction of IT risk and controls across the organisation, aligned with regulatory expectations including Provision 29 of the UK Corporate Governance Code, working closely with the IT controls manager and advisor alongside senior stakeholders across the business.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
You’ll be instrumental in embedding a strong IT controls and Cyber culture, collaborating across teams to build a resilient and secure technology environment that supports the business’s growth and governance ambitions. Backgrounds in IT SOX, ITGCs, IT Risk, IT controls and Cyber controls in a FTSE 250 business and/or professional services firm would be beneficial.
What You'll Be Doing
- Lead the design and implementation of a fit-for-purpose IT Controls, Cyber controls and IT Risk framework from the ground up.
- Embed a risk culture aligned with Provision 29, ensuring robust internal controls for effective risk management.
- Strengthen governance through policies, standards, and control documentation.
- Monitor control effectiveness and drive remediation of deficiencies.
- Lead monthly IT control reporting and governance forums.
- Provide oversight across key cyber domains (DR, BCP, vulnerability management, patching).
- Support Internal Audit and external assurance activity.
- Deliver insight on emerging risks and continuous improvement opportunities.
- Identify, assess, and mitigate IT risks, covering cybersecurity, data privacy, infrastructure, and operational technology.
- Work collaboratively with technology and business units to integrate risk considerations into all projects and operations.
- Stay ahead of evolving threats and industry best practices.
- Lead training and awareness initiatives across the organisation to strengthen understanding and ownership of IT risk.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skillset:
- Experience in IT Risk, Audit, or Governance
- Knowledge of control frameworks (IT SOX, ICFR, UK Corporate Governance Code)
- Strong understanding of IT controls (access, change, operations)
- Cyber controls experience/exposure to cyber frameworks such as NIST, COBIT, and ISO27001
- Experience working in complex or decentralised environments
- Excellent communication and ability to challenge constructively
- SAP knowledge
- Experience with automation / AI tools (e.g. Copilot, ChatGPT)
- Flowcharting tools (e.g. Visio)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills