Role Purpose
As an IT Risk & Control Governance Specialist, reporting to the Head of IT & Security Risk Management, you will play a key role in strengthening risk governance, risk management, and risk culture across Technology. You will support the identification, assessment, monitoring, reporting, and remediation of technology and cybersecurity risks, while ensuring effective governance and oversight of risk and control activities.
Key Responsibilities
- Support the execution and continuous improvement of the Technology risk management framework.
- Monitor technology, cyber, operational and control risks, ensuring timely escalation where required.
- Support the management and governance of risk mitigation actions and issues.
- Follow up on remediation plans and challenge delays or ineffective responses.
- Produce regular risk, control, and governance reporting for management and governance forums.
- Perform quality reviews and trend analysis on risks, issues, findings, and Key Risk Indicators (KRIs).
- Ensure reporting is accurate, timely, and actionable.
- Act as a trusted advisor to Technology stakeholders on risk and issue management matters.
- Collaborate with first, second, and third-line functions to ensure alignment on risk management activities.
- Support and coordinate the network of risk champions and risk ambassadors.
- Promote awareness and understanding of risk management principles and practices.
- Contribute to governance, process improvement, and automation initiatives.
Technical & Risk Expertise
- Solid understanding of IT risk management, cybersecurity risk, operational risk, and control frameworks.
- Experience with risk governance processes including RCSA, issue management, action tracking, and KRIs.
- Familiarity with industry frameworks and regulations such as COBIT, NIST, ISO 27001, DORA, and Enterprise Risk Management practices.
- Ability to analyse risk data and translate findings into business-focused insights.
Professional Skills
- Strong stakeholder management, communication, and influencing skills.
- Ability to challenge constructively and drive accountability.
- Excellent analytical, reporting, and problem-solving capabilities.
- Strong attention to detail and ability to work autonomously across multiple initiatives.
- Continuous improvement mindset and change management awareness.