Job Description
Senior Risk Manager – Digital, Technology & Transformation
Salary: c.£85,000 + Benefits
Hybrid – Remote with 1–2 on-site visits per month
We are partnering with a leading UK general insurer undergoing significant digital and technology transformation.
This is a senior, high-impact second line role operating directly alongside Technology leadership. You will provide robust oversight and credible challenge across digitisation, infrastructure evolution, cloud migration, legacy modernisation and operational resilience.
This is not a passive role. It requires commercial judgement, technical credibility and the confidence to engage with the IT Director and peer group to challenge constructively while enabling progress.
The organisation is investing heavily in digitisation and modernisation. As Senior Risk Manager, you will ensure that:
* Digital transformation is delivered within risk appetite
* Infrastructure and cloud strategies are controlled and resilient
* Legacy risks are clearly understood and actively managed
* Technology change is governed, visible and commercially aligned
A key focus will be improving visibility and transparency of technology risk — ensuring leadership has clear, decision-ready insight into exposures, control effectiveness and residual risk.
Key Responsibilities
Technology Risk Oversight & Challenge
* Provide strong, independent second line challenge to Technology and Digital leadership
* Oversee major digitisation and transformation programmes
* Conduct deep dives into infrastructure, cloud and legacy risks
* Assess design and operating effectiveness of key technology controls
* Ensure incident and problem management themes are understood and addressed at root cause
Digitisation & Infrastructure Visibility
* Drive improved visualisation and reporting of technology risk across the estate
* Ensure clear articulation of risk exposure across infrastructure, cloud and critical systems
* Support structured approaches to legacy de-risking and modernisation
* Enhance transparency of control ownership and accountability
Governance & Risk Framework
* Embed a pragmatic, commercially aligned risk framework across Technology
* Lead RCSAs, thematic reviews and control testing across digital and infrastructure domains
* Define clear risk appetite metrics and KRIs for technology and operational resilience
* Ensure alignment with PRA/FCA expectations and relevant ISO/NIST standards
Operational Resilience & Change Risk
* Oversee resilience across critical services and digital platforms
* Provide oversight of change governance in fast-moving technology programmes
* Ensure risk considerations are embedded early in design and delivery
Executive & Board Engagement
* Translate complex technical exposures into clear commercial insight
* Deliver concise, decision-focused reporting to senior leadership and Board
* Act as a trusted but challenging advisor to IT and Digital Directors
* Balance enablement of innovation with disciplined governance
Experience & Profile
We are seeking a technically credible risk leader who can operate confidently with senior Technology stakeholders.
You will bring:
* Strong second line experience within UK general insurance or a regulated environment
* Deep understanding of enterprise risk tools (RCSAs, KRIs, control frameworks)
* Experience overseeing infrastructure, cloud, digitisation and legacy transformation risk
* Knowledge of PRA/FCA regulatory expectations and operational resilience requirements
* Familiarity with ISO 27001, NIST and related control frameworks
* Ability to challenge senior Technology leaders constructively and commercially
* Strong analytical capability with the confidence to drill into technical detail — but operate strategically
This role would suit someone with a strong technical foundation who has moved into governance or risk and now wants to operate at enterprise level — influencing direction, not just assessing compliance.