Auricoe
IT Risk & Controls Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
IT Risk & Controls Manager
Location: London
Hybrid: 2 days office
Salary: Up to £100,000 + Bonus + Benefits
Auricoe is supporting a leading UK financial services organisation with the appointment of a Technology Risk Business Partner into its second-line Risk function.
Experience in a formal second-line Technology Risk role is advantageous but not essential. Strong first-line Technology Risk/Controls candidates who understand how risk is managed at the Technology coalface and are ready to move into broader independent risk partnering are particularly encouraged to apply.
This is a newly shaped role offering considerable exposure across Technology and senior leadership. We're particularly interested in people who combine strong Technology Risk knowledge with curiosity, commercial judgement and the ability to build trusted relationships with Technology teams.
This isn't a checklist-style assurance position. The successful person will get close to Technology, understand what's really happening, help teams arrive at practical solutions and provide effective independent challenge when required.
The Role
Working closely with Technology, Cyber Security and senior business stakeholders, you will:
- Provide pragmatic second-line advice, support and challenge across Technology and Cyber Risk.
- Build trusted relationships across Technology – from engineers, infrastructure and technical specialists through to senior Technology and COO-level stakeholders.
- Get underneath emerging risks and issues, using curiosity and judgement rather than simply relying on prescribed assurance activity.
- Work directly with Technology teams to understand technical issues, assess the associated risk and help develop practical, proportionate solutions.
- Review and challenge Technology/Cyber risk assessments, controls, remediation plans and risk-acceptance decisions.
- Undertake targeted reviews, thematic assessments and gap analysis, taking personal ownership for driving activity and outcomes.
- Provide risk input into significant Technology change and investment.
- Help Technology teams strengthen their understanding and management of risk, while constructively challenging where necessary.
- Translate detailed Technology risks into clear, concise messages for senior management and Risk Committees.
- Work across areas including Technology controls, Cyber Security, infrastructure, cloud, operational resilience and third-party risk.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We're Looking For
You'll ideally have:
- Strong experience within Technology Risk, Technology Controls, Cyber Risk, Information Security Risk or Technology Governance.
- Experience within financial services, or strong Technology Risk experience gained within another highly regulated environment.
- The ability to get into the detail with Technology teams and engineers and discuss technical risks and potential solutions credibly.
- Working knowledge of Cyber/Technology frameworks such as NIST and associated control or maturity frameworks.
- Evidence of personally identifying risks, investigating issues, challenging decisions and driving improved outcomes.
- Examples of helping Technology teams understand risk and arrive at practical solutions they are willing to own.
- Excellent stakeholder skills, with the judgement to know when to support, influence or challenge.
- A curious, self-directed approach – someone who identifies where attention is required rather than waiting to be given a checklist.
- The ability to translate detailed Technology issues into clear risk messages for senior stakeholders.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Experience in first-line Technology Risk or Technology Controls can be particularly valuable, providing practical insight into how Technology risks and controls are managed within the business.
CRISC, CISA, CISM or CISSP would be advantageous but aren't essential.
Salary: Up to £100,000 basic + discretionary bonus + benefits
Location: City of London
Hybrid: Typically 2 days per week in the office
Employment: Permanent
If you're currently working in Technology/Cyber Risk and want a role where you can build trusted relationships with Technology while influencing how a major financial services organisation understands and manages risk, please apply or contact Matt Goodman at Auricoe for a confidential discussion.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location