IT Risk Manager

Our client are a leading Global Investment Management firm and the IT Risk Manager who will be based in London will form part of the UK Risk Management team

Description

The IT Risk Manager will be responsible for:

• Presenting, developing and maintaining global Risk Management Framework
• Oversight of Information Technology (including Information Security) risks and issues, including independent review, assurance and timely reporting to key stakeholders (e.g. boards, committees, regulators), in relation to the effectiveness of the control environment
• Oversee the effective recording, analysis and reporting of Information Technology risk incidents and evaluating materiality
• Contributing to the development of appropriate systems / tools to measure and report on key Information Security risk management metrics and support reporting to subsidiary boards, and leadership teams where appropriate
• Assisting reporting, insight and information on the Information Technology risk management performance including the provision of recommendations and suggested improvements
• Represent Risk Management team on projects and change initiatives, and supplier on boarding and management, as required
• Represent Risk Management on operational resilience initiatives as it relates to Information Technology risks
• Assist Information Technology, by providing guidance and advice, in relation to IT controls that fall within scope as a SOX reporting entity

Profile

The IT Risk Manager should have the following skills:

• Excellent analytical skills
• Working knowledge of Information Technology and Information Security Risk Management
• Proven experience in Information Technology and Information Security Risk Management processes
• Flexibility in approach, ability to adapt practices, effectively react to internal and external events and activities
• Willingness and 'can do' attitude to get involved in current, routine and new activities
• Achieve quick and considered decision making and embrace change
• Pro-active approach to tasks and to be accountable and take ownership for things
• Attention to detail and the ability to constructively resolve problems and improve processes and procedures
• Good judgement regarding prioritisation of tasks; taking the lead; and escalation
• Well-developed interpersonal skills - articulate and able to influence
• Effective verbal and written communication

Skills

• Working knowledge of security frameworks/standards e.g. ISO 27001, HMG Cyber Essentials or NIST Cybersecurity Framework
• Ideally, Certified in Risk and Information Systems Control (CRISC) or other risk management certification

Job Offer

Salary of £90,000 -£100,000 plus attractive benefits package