We are looking for Portfolio Manager - Technology Risk & Controls at Sheffield, UK – 3 days per week Onsite
Role Overview
* OUR CLIENT Technology is seeking an experienced Portfolio Manager to establish, structure, and embed a Technology Risk & Controls (R&C) portfolio governance framework across a large and growing estate.
* The initial focus (first 3–6 months) will be to design and stand up the R&C portfolio model, providing clarity, control, and consistency across 150+ resources, in response to increasing audit, regulatory, and assurance demands.
* Once the framework is embedded and operating effectively, ownership will transition to the BAU Risk & Controls teams. The role will then evolve into a Risk & Controls Project Manager, leading discrete R&C initiatives while continuing to report into Risk & Controls Technology Leadership.
Key Responsibilities
* Portfolio Setup & Governance (Initial 3–6 Months)
* Design and implement a Risk & Controls portfolio governance framework, including:
* Portfolio structure, operating cadence, and decision forums
* Standardised demand intake, prioritisation, and reporting
* Clear ownership and accountability across controls and initiatives
* Establish end to end visibility across R&C initiatives, resources, dependencies, and risks.
* Define and implement Key Control Indicators (KCIs) and portfolio metrics to assess:
* Control effectiveness
Risk exposure
* Delivery health and sustainability
* Strengthen audit readiness by standardising control tracking, evidence management, and responses to:
* Internal Audit, External Audit, and 2LoD / 3LoD reviews
* Introduce efficient, repeatable ways of working, leveraging Agile practices, automation, and tooling where appropriate.
* Act as a senior coordination point between Technology Leads, Control Owners, Risk teams, and Audit stakeholders.
* Transition to BAU & Project Delivery
* Support a controlled handover of the portfolio framework to BAU teams, ensuring durability and minimal dependency.
* Transition into a Risk & Controls Project Manager role, leading independent initiatives such as:
* Control remediation and uplift programmes
* Regulatory response and audit issue closure
* Control design and process enhancements
* Continue regular delivery, risk, and portfolio reporting to R&C Technology Leads and senior stakeholders.
* Stakeholder Engagement
* Build trusted relationships with senior stakeholders across Technology, Risk, and Audit.
* Confidently manage conflicting priorities and drive risk based decision making.
* Translate complex risk and technology topics into clear, executive level insights.
Skills & Experience
Essential
* Proven experience managing enterprise scale technology or risk portfolios in a regulated financial services environment.
* Strong background in Technology Risk & Controls, including control design, governance, remediation, and audit engagement.
* Demonstrated ability to set up governance and operating models from inception.
* Experience working with large, multi-disciplinary teams and complex stakeholder groups.
Desirable
* Experience transitioning portfolios or programmes from establish → BAU.
* Strong project / programme management background.
* Familiarity with enterprise risk tooling, metrics, and reporting.