FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in technology risk management, IT GRC, and cyber risk within technology-led organizations, with a strong focus on risk assessment, mitigation strategies, and compliance with regulatory frameworks. Proven ability to lead cross-functional teams, present insights effectively, and mature risk management processes using tools like Riskonnect.
Highest-signal resume keywords
Technology Risk ManagementIT GRCCyber RiskRiskonnect ExperienceRegulatory Frameworks (SOX, NIST)
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Risk AssessmentOperational Risk ManagementIAM/PAMVulnerability ManagementCloud Risk ManagementIncident ManagementBackup/Disaster RecoveryChange/Release RiskData AnalysisRisk Appetite Metrics
Soft Skills
LeadershipPresentation SkillsCollaborationRelationship BuildingCommunication
Tools & Technologies
RiskonnectExcelPowerPointBusiness Intelligence Tools
Industry Keywords
Technology Risk LifecycleEnterprise Risk ManagementSecurity Risk ManagementIT AuditBest Practices for Risk Management
Tech Stack
Tools & technologiesCloudCyber Security
About the role
Key responsibilities & impact- Run a consistent, evidence-based technology risk lifecycle across IT
- Manage all risks across IT and align with the Enterprise Risk Management Team
- Collaborate with the Security Risk Management Team on ways of working, best practice, and operational risk management
- Provide insight and reporting to IT Leadership teams, Enterprise Risk Management, and Security Risk Committees
- Mature the IT Risk Framework, drive standards, and improve understanding and engagement
- Follow risks from initiation through mitigation and actively manage risk appetite
- Use Riskonnect to manage the technology risk register, action tracking, and reporting
- Produce governance materials for IT Leadership, Enterprise Risk Management, and Security Risk Management forums
- Evaluate new risks, assess business and IT impact, and develop treatment plans
- Drive alignment on how risks are captured, scored, and reported
- Provide risk escalation management and guidance
- Track IT risks and treatment plans using standard tooling and a clear framework
- Ensure IT risks arising from audits, projects, incidents, and BAU activities are raised, understood, and managed
- Track treatment-plan delivery and escalate slippage or risk-appetite breaches
- Keep IT Policy and supporting operating procedures up to date
- Lead IT Risk Management training sessions and briefings
- Mature IT Risk Appetite Metrics, KRIs, KPIs, reporting, and dashboards
- Identify AI use cases to improve risk-management processes
- Own risks arising from audits through completion
- Identify opportunities to streamline and improve risk management
- Coach junior team members to mature the IT GRC risk service
Requirements
What you’ll need- Demonstrable experience in technology risk, IT GRC, cyber risk, operational risk, or IT audit within a technology-led organisation; software/SaaS preferred
- Minimum of 10 years’ experience across IT and Security working in global environments
- Strong knowledge of IAM/PAM, vulnerability and patch management, secure configuration, cloud risk, logging/monitoring, incident learnings, backup/DR and resilience, and change/release risk
- Strong leadership skills with ability to present articulately and concisely
- Excellent presentation skills and ability to coordinate and facilitate workshops for technical teams
- 5+ years of leading IT risk management in a complex environment
- Understanding of industry best practices for Risk Management across IT, AI and CyberSecurity
- Growth mindset to learn and engage with new technologies
- Ability to work independently and collaborate in cross-functional teams
- Ability to build strong relationships with internal and external stakeholders
- Excellent written and spoken communication
- Experience with regulatory frameworks such as SOX and NIST
- Riskonnect experience preferred
- Strong Excel/PowerPoint skills and BI/reporting tools
- Successful applicants must pass drug screening and a comprehensive background check
- Successful applicants must provide proof of work authorization as applicable under local laws
Benefits
Comp & perks- Flexible benefits fund
- Emergency leave days
- Adoption leave
- 28 days annual leave plus bank holidays
- Pension
- Life cover
- Private medical insurance
- Parental leave
- Education assistance program
- Hybrid working with expectation of being on-site 50% of working hours
- Drug screening and comprehensive background check for successful applicants