Job Description
We’re recruiting for a Technology Risk and Controls Manager to join us. The Technology Risk and Controls Manager supports risk and control activities within a dedicated L&G business division, embedding risk ownership into technology delivery and operations. The role helps teams identify, assess, manage and report technology risks—covering cyber, IT and third-party areas—while maintaining controls, tracking issues and providing risk challenge and assurance.What you’ll be doing:
1. Supporting the maintenance and monitoring of key technology controls within the dedicated L&G business division, working closely with control owners to ensure control performance is effective and appropriately evidenced for compliance, audit and assurance purposes
2. Supporting business division technology risk identification and assessment activities, including Risk and Control Self-Assessments (RCSAs), to ensure emerging technology risks, material exposures and changes in risk profile are captured and escalated in a timely and accurate manner in accordance with policies and standards
3. Supporting the implementation and operation of key technology controls across the business division, streams and products to ensure control effectiveness and compliance with policies, regulatory requirements and audit expectations
4. Facilitating and guiding business division response and remediation of management-identified technology issues, control failures, technology-related risk events and audit issues to ensure root causes are addressed and sustainable remediation plans are delivered
5. Working closely with technology teams within the dedicated L&G business division, Business Technology Risk Partners and Technical Risk Functional Areas to ensure shared understanding of effective technology risk management processes and supporting the embedding of strong risk culture
6. Providing SME support on IT and change initiatives with respect to delivering improvements to customer support and experience
QualificationsWho we’re looking for:
7. Familiarity with technology and security frameworks such as NIST Cyber Security Framework (CSF), COBIT, ISO27001/2 and COSO
8. Good understanding of regulatory requirements relevant to financial services (e.g. FCA/PRA regulations, UK GDPR, DORA)
9. Experience in technology risk, governance or assurance within a complex, regulated environment
10. Experience designing or overseeing technology controls implementation, controls automation, risk frameworks, and audit responses across third party technology, cyber security and information technology
11. Experience working collaboratively with technology and business teams
Not essential based on role holder experience;
12. Technology risk and governance related qualifications such as CRISC, CGEIT or CISA
13. IT related qualifications such as ITIL
14. Cyber and information security related qualifications such as CISM or CISSP
Whatever your role, we reward performance and behaviour with a package that looks after all the things that are important to you. Here are some of the benefits we offer:
15. The opportunity to participate in our annual, performance -related bonus plan and valuable share schemes
16. Generous pension contribution
17. Life assurance
18. Healthcare Plan (permanent employees only)
19. At least 25 days holiday, plus public holidays, 26 days after 2 years’ service. There’s also the option to buy and sell holiday
20. Competitive family leave
21. Participate in our electric car scheme, which offers employees the option to hire a brand-new electric car through tax efficient salary sacrifice (permanent employees only)
22. There are the many discounts we offer – both for our own products and at a range of high street stores and online
23. In 2023, some of our workspaces were redesigned. Our offices are great spaces to connect and collaborate and have your wellbeing at the heart
Additional Information At L&G, we believe it's possible to generate positive returns today while helping to build a better future for all. If you join us, you’ll be part of a welcoming, inclusive culture, with opportunities to collaborate with people of diverse backgrounds, views, and experiences. Guided by leaders with integrity who care about your future and wellbeing. Empowered through initiatives which support people to develop their careers and excel.We care passionately about outcomes rather than attendance and are therefore open to discussing all kinds of flexible working options including part-time, term-time and job shares. Although some roles have limited flexibility due to customer demand, we accommodate requests when we can. It doesn’t matter if you don’t meet every single criterion in this advert. Instead, think about what you excel at and what else you can bring in terms of strengths, potential and connection to our purpose. Share this article