Risk & Control Specialist

Inside IR35 - Hybrid working - Must have an active BPSS or SC Clearance

Role Description:

This role maps to the Technology Senior Risk and Control Specialist profile protecting the organisation through appropriate Technology risk management, ensuring that risks are captured, understood, clearly communicated and potential sources of loss (eg Financial, Customer) are managed in a cost-effective manner. Role holder is required to be a specialist in Evergreening and Technology Risk Management.

• Operate the Global Evergreening Control, including control design, execution model, and continuous improvement to maintain effectiveness and audit-readiness.
• Drive implementation of the evergreening framework end-to-end: set adoption standards, define success measures, track delivery, remove blockers, and ensure closure of gaps through agreed remediation plans.
• Provide oversight of framework implementation. Monitor adoption progress, identify risks and gaps, and drive remediation or escalation as required.
• Act as the senior point of accountability for stakeholder alignment-secure decisions, negotiate trade-offs, and maintain commitment from business and technology leaders.
• Lead governance updates in RCMs/RCMMs, escalating issues where required, and ensuring actions have clear owners, dates, and measurable outcomes.

Key Accountabilities:

• Accountable for timely identification and remediation of Evergreening control gaps, including formal escalation where delivery is at risk.
• Accountable for ensuring control evidence is complete, consistent, and audit-ready at all times.
• Accountable for clear communication of residual risk, control performance, and emerging themes to senior Technology and Risk leadership

Requirements:

• Demonstrated ownership mindset: sets direction, drives closure and holds stakeholders to account for delivery
• Proven ability to lead through influence in a Matrix environment, including making hard calls and escalation appropriately.
• Experience shaping governance narratives for senior leadership, turning complex risk/control data into decisions and actions.
• People leadership or functional leadership experience (eg leading a virtual team, mentoring, capability uplift)
• Strong stakeholder management and influencing skills at senior levels.
• Knowledge of regulatory requirements for Operational Resilience (eg, IBS, COs).
• Bachelor's degree (or demonstrable experience) in Information Technology, Computer Science, or a related field; advanced degree or relevant certifications (eg, CRISC, CISM, CISA) preferred.

If you are looking for your next opportunity please apply below or contact me on my mobile