IT Risk & Resilience Lead
Check you match the skill requirements for this role, as well as associated experience, then apply with your CV below.
Location: Hybrid/London
Employment Type: Full-Time | Permanent
Department: Risk, Governance & Compliance
Level: Manager/Senior Manager
The Opportunity
Our client is looking for an experienced IT Risk & Resilience Lead to drive enterprise-wide initiatives in IT governance, risk, compliance, and operational resilience. In this strategic role, youll help shape how our client anticipates, responds to, and recovers from IT-related risks, while ensuring ongoing alignment with global regulatory requirements.
This is a high-impact role working across business units, third parties, and regulatory environments, ideal for someone with strong risk expertise and a deep understanding of how technology, compliance, and resilience intersect in regulated environments.
What Youll Be Doing
Youll be responsible for designing, maintaining, and evolving our IT risk frameworks, ensuring they meet both business needs and regulatory expectations. Your work will span seven key areas:
1. IT Governance & Compliance
Youll advise governance forums, monitor compliance across internal policies and regulatory standards (e.g., DORA, GDPR, FCA, BaFin), and ensure our digital resilience strategy is fully embedded across the business.
2. IT Risk Management
Own the IT Risk Management Framework, run independent control tests, assess vulnerabilities, lead risk assessments, and guide remediation across critical systems and functions.
3. Operational Resilience & Incident Oversight
Coordinate post-incident analysis and response, ensure adherence to incident protocols, and enable robust service continuity in the face of technology disruptions.
4. Stress Testing & Critical Function Assurance
Lead the annual IT stress testing programme and ensure continuous review of critical business functions from a technology perspective.
5. Third-Party & Supply Chain Risk
Evaluate and oversee risk exposure from third-party providers and technology supply chains, ensuring controls are in place and regulatory alignment is maintained.
6. Awareness & Culture
Develop and lead IT risk training initiatives that build resilience awareness across staff and partners, reinforcing policy adherence.
7. Innovation & Emerging Risk (AI Focus)
Support development of the firms approach to AI governance, implementation, and risk mitigation as new technologies are adopted.
What Youll Bring
* Extensive experience in IT operational risk within financial services or a similarly regulated environment.
* Strong understanding of IT governance, control frameworks, digital resilience, and compliance (e.g. DORA, GDPR, FCA Operational Resilience).
* Proven ability to conduct in-depth risk assessments, scenario testing, and vulnerability analysis.
* Experience working across departments and engaging with senior leadership on risk strategy.
* Excellent communication and stakeholder management skills.
* Strong analytical mindset with a detail-oriented approach.
* Proficiency with Microsoft Office; familiarity with GRC tools is advantageous.
* Knowledge of enterprise and operational risk management frameworks.
McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.