Technology Risk and Controls Manager - Senior Associate

Reference: xxs405xqv1yb7x9efgdn

We are seeking a Technology Risk and Controls Manager at Senior Associate level to support the effective management of technology risk, governance and internal controls across a complex, highly regulated environment. This is an excellent opportunity for an experienced risk professional to work with technology, cyber security, operations, compliance and audit stakeholders, helping to strengthen the control framework and promote a resilient, well-governed technology landscape.

The role will involve identifying, assessing and monitoring technology risks, ensuring that appropriate controls are designed, documented, implemented and tested. You will lead risk and control assessments, review control effectiveness, track remediation activity and provide clear reporting to senior management and relevant governance forums. Responsibilities will include supporting risk and control self-assessments, coordinating internal and external audit activity, overseeing issues and action plans, and challenging control owners where required. You will also contribute to the development of policies, standards, procedures and management information, while helping to embed consistent risk management practices across technology teams.

The successful candidate will have substantial experience in technology risk, IT controls, technology assurance, cyber risk or a related discipline, ideally gained within a regulated or complex organisation. You should have a strong understanding of risk and control frameworks, governance principles, audit methodologies and common technology risks, including access management, change management, operational resilience, third-party risk, incident management and data protection. Relevant professional qualifications or certifications, such as CISA, CRISC, CISSP, CISM or equivalent experience, would be advantageous. Strong analytical, communication and stakeholder management skills are essential, along with the ability to translate technical issues into clear business risks and practical recommendations. You will be organised, confident when influencing senior stakeholders and comfortable managing multiple priorities in a changing environment.

COMPETITIVE SALARY
Added 19/10/2026
Reference: xxs405xqv1yb7x9efgdn

Technology Risk and Controls Manager - Senior Associate

London, England, United Kingdom Permanent Risk Analyst

Other similar jobs

Technology and Cyber Employee Platforms Risk - Executive Director

Added 18/09/2026

We are seeking an experienced Technology and Cyber Employee Platforms Risk Executive Director to lead the development and execution of risk management strategies across technology, cybersecurity, and employee-facing platforms. This senior role will provide independent challenge and expert guidance to technology and business leaders, ensuring that risks are identified, assessed, managed, and reported in line with regulatory expectations and organisational risk appetite. The successful candidate will operate across a complex, highly regulated environment and influence decisions at executive and board level. Key responsibilities include setting the strategic direction for technology and cyber risk oversight; maintaining effective risk and control frameworks;...

Learn more

Senior Security Architect - SecOps and Vulnerability Management

Added 07/09/2026

We are seeking a Senior Security Architect to lead the design and continuous improvement of SecOps and vulnerability management capabilities across a complex technology environment. This is a strategic and hands-on role for an experienced security professional who can translate business and technology risks into practical, resilient security solutions. You will define architecture principles, security standards and operating models that strengthen the organisation’s ability to identify, assess, prioritise and respond to cyber threats. Key responsibilities will include developing and maintaining security architecture for security operations, vulnerability management, threat detection, incident response and security monitoring. You will evaluate existing controls, identify...

Learn more

Vice President, Data Protection Management and Governance

Added 08/10/2026

We are seeking an experienced Vice President, Data Protection Management and Governance to lead the development, implementation and continuous improvement of a comprehensive data protection framework. This senior role will provide strategic direction on privacy, data governance and regulatory compliance, helping to embed responsible data practices across a complex, international environment. You will act as a trusted adviser to executive leadership and business stakeholders, translating evolving legal and regulatory requirements into practical, sustainable solutions. Key responsibilities will include overseeing data protection policies, standards, controls and governance processes; maintaining effective records of processing activities; and guiding privacy impact assessments, data sharing...

Learn more

Penetration Testing Program Governance & Vendor Strategy Manager

Added 02/09/2026

We are seeking a Penetration Testing Program Governance & Vendor Strategy Manager to lead the governance, planning and continuous improvement of an enterprise-wide penetration testing programme. In this role, you will establish and maintain standards, policies, procedures and control frameworks that support effective testing across applications, infrastructure, cloud environments, networks and emerging technologies. You will oversee the annual testing roadmap, prioritising activity according to business risk, regulatory expectations, threat intelligence and changes to the technology estate. You will manage relationships with external penetration testing providers, including supplier selection, due diligence, onboarding, contract management, performance reviews and service-level governance. Responsibilities will...

Learn more

Senior Lead Cybersecurity Architect

Added 05/10/2026

We are seeking a Senior Lead Cybersecurity Architect to define and advance enterprise security architecture across a complex, evolving technology environment. In this strategic role, you will establish secure-by-design principles, develop target-state architectures, and ensure that security controls are embedded consistently across cloud, infrastructure, applications, data, networks, and emerging technologies. You will work closely with technology, engineering, risk, privacy, and business stakeholders to translate organisational objectives and regulatory expectations into practical, resilient security solutions. Key responsibilities include leading the development and maintenance of security architecture frameworks, reference architectures, standards, patterns, and roadmaps. You will assess proposed technologies and major initiatives,...

Learn more

Acquisition Cybersecurity Operations (ACO) - Senior SOC Analyst

Added 11/09/2026

We are seeking an experienced Acquisition Cybersecurity Operations (ACO) – Senior SOC Analyst to support the protection, monitoring and continuous improvement of complex digital environments. In this role, you will act as a senior member of a security operations function, providing expert analysis of security events, coordinating incident response activities and helping maintain effective operational security across enterprise systems, networks and cloud services. Your responsibilities will include monitoring and triaging alerts from SIEM, endpoint detection and response, network security and vulnerability management platforms; investigating suspected compromises; correlating events across multiple data sources; and determining the severity, scope and potential impact...

Learn more

Senior Cloud Security Architect - AWS & GCP

Added 04/09/2026

We are seeking a Senior Cloud Security Architect to lead the design, implementation and continuous improvement of secure cloud environments across Amazon Web Services (AWS) and Google Cloud Platform (GCP). This is a strategic role for an experienced security professional who can translate business and technical requirements into resilient, scalable and compliant cloud architectures. You will work closely with engineering, infrastructure, application development, risk and compliance teams to embed security throughout the cloud lifecycle. Your responsibilities will include defining cloud security architecture principles, reference models and standards; designing identity and access management, network security, encryption, key management, logging, monitoring and...

Learn more

Senior DevSecOps Architect

Added 04/09/2026

We are seeking a Senior DevSecOps Architect to define and lead secure, scalable, and automated delivery practices across complex technology environments. In this role, you will develop DevSecOps strategies that integrate security throughout the software development lifecycle, from planning and design through deployment and operation. You will work closely with engineering, platform, operations, risk, and compliance teams to establish practical standards that improve delivery speed, resilience, and security without compromising innovation. Your responsibilities will include designing cloud and hybrid infrastructure architectures, developing CI/CD and infrastructure-as-code patterns, and embedding automated security controls into build and release pipelines. You will provide technical...

Learn more

Senior Principal Cybersecurity Architect

Added 04/09/2026

We are seeking a Senior Principal Cybersecurity Architect to define and advance enterprise security architecture across a complex, highly regulated technology environment. In this influential role, you will establish architectural direction, strengthen security capabilities, and ensure that business and technology strategies are supported by resilient, scalable, and risk-informed solutions. You will work closely with senior stakeholders, engineering teams, product leaders, and risk specialists to translate business objectives into practical security outcomes. Your responsibilities will include developing and maintaining security architecture principles, reference models, standards, and roadmaps covering cloud, infrastructure, applications, data, identity, networks, and emerging technologies. You will lead the...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology and information security risks across a complex, regulated environment. You will provide constructive challenge, practical advice and independent oversight, helping the business to identify, assess and manage risks within appetite while supporting the delivery of strategic technology objectives. Key responsibilities will include maintaining and enhancing cyber and technology risk and control frameworks; conducting risk assessments, control reviews and thematic deep dives; and monitoring the effectiveness of preventative and detective controls. You will oversee the identification, recording and remediation of control weaknesses, ensuring...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology, information security and operational risks across a complex organisation. This role will provide independent challenge, practical guidance and assurance over the design and effectiveness of controls, helping to maintain a robust risk management framework and support informed decision-making at all levels. You will partner with technology, cyber security, risk, compliance, audit and business stakeholders to identify, assess and monitor risks across areas including cyber security, infrastructure, cloud services, third-party providers, data protection, resilience and technology change. Key responsibilities will include maintaining risk...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology and cyber risk across a complex organisation. This role will provide effective challenge, oversight and practical guidance to ensure that technology services, information assets and security processes are managed within an appropriate risk and control framework. You will work closely with senior stakeholders, technology teams, risk specialists and control owners to promote strong governance and a consistent approach to risk management. Key responsibilities will include maintaining and enhancing cyber and technology risk frameworks, policies, standards and control libraries; identifying, assessing and monitoring...

Learn more

Risk & Controls Manager (Cyber & Technology)

Added 15/10/2026

We are seeking an experienced Risk & Controls Manager (Cyber & Technology) to strengthen the management of technology, information security and cyber risk across a complex organisation. This role will provide independent challenge, practical guidance and oversight of the control environment, helping to ensure that key risks are identified, assessed, treated and reported effectively. You will work closely with technology, cyber security, operational risk, audit, compliance and business stakeholders to promote strong risk management practices and resilient ways of working. Key responsibilities will include maintaining and enhancing cyber and technology risk frameworks, policies, standards and control methodologies; facilitating risk and...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective identification, assessment and management of technology and information security risks. This role will work with stakeholders across technology, security, risk and business functions to assess the design and operating effectiveness of controls, identify areas for improvement and promote consistent risk management practices. Responsibilities will include maintaining risk and control assessments, supporting the development and monitoring of key risk and performance indicators, and contributing to the management of issues, actions and remediation plans. You will assist with control testing, evidence gathering and the preparation of clear...

Learn more

Risk & Controls Analyst (Cyber & Technology)

Added 15/10/2026

We are seeking a Risk & Controls Analyst (Cyber & Technology) to support the effective management of technology, information security and operational risks across a complex business environment. This role will help strengthen the control framework, promote consistent risk management practices and provide insight into the organisation’s cyber and technology risk profile. You will work with stakeholders across technology, security, risk, compliance and business functions, building constructive relationships and helping teams understand and manage their control responsibilities. Key responsibilities will include maintaining risk and control documentation, coordinating control assessments and supporting the identification, evaluation and treatment of cyber and technology...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.