IT Risk & Control Manager
* Location: Chatham or Wolverhampton - 2 or 3 days per week
* 6 Months Contract
* £500 - £550 PD - Inside IR35
We're seeking an experienced IT Risk & Control Manager to support a large-scale transformation programme with a strong Governance, Risk and Compliance (GRC) focus. This role is ideal for someone with a background in financial services or other regulated environments, who can confidently manage IT, Cyber, and Data risk activities. You'll play a key role in leading Risk & Control Self-Assessments (RCSAs), enhancing control frameworks, and driving risk reporting and assurance across the business. Strong communication skills are critical, you'll engage directly with senior stakeholders, risk owners, and SMEs to embed robust risk practices and ensure ongoing regulatory alignment.
Role and Responsibilities:
* Plan, lead, and execute RCSAs across IT and technology functions
* Collaborate with first-line teams to review and update controls and treatment plans
* Maintain the enterprise risk system of record with accurate, up-to-date information
* Identify and propose updates to Key Risk Indicators (KRIs) and risk metrics
* Support the development of control test scripts and explore opportunities for automation
* Monitor emerging risks, evolving control requirements, and regulatory changes
* Contribute to internal/external audits and governance reporting packs
* Ensure full compliance with risk and data governance policies
Planned Deliverables Include:
* RCSA templates and CSA results
* System and KRI updates
* Control Test Scripts
* Ongoing contributions to audit readiness and governance packs
Essential Skills & Experience
* Strong expertise in IT risk, controls, and GRC frameworks.
* Deep understanding of Cyber, IT Operations, and/or Data risks.
* Proven experience managing RCSAs, designing controls, and leading risk initiatives.
* Familiarity with ITGC audits and regulatory requirements in financial services.
* Excellent communication and stakeholder engagement skills.
* Understanding of hybrid/cloud/on-prem IT infrastructure models.