IT and IS Oversight Manager
HybridLondon, England, United Kingdom
Job Summary
Provide independent oversight and challenge across IT and Information Security functions, ensuring risks are effectively managed and activities align with governance frameworks and risk appetite. Assess the design and effectiveness of controls, identify improvement areas, and support remediation while leading risk assessments, control testing, and scenario analysis. Act as a trusted subject matter expert throughout the change lifecycle, reviewing technology and security changes to ensure risks and controls are identified and operating effectively. Provide oversight of security incidents and control failures, ensuring robust root cause analysis and corrective actions, while ensuring compliance with regulatory requirements and supporting audit activity. Produce meaningful risk reporting for senior leaders and build strong relationships across Technology, Cyber Security, Operations, Compliance, and Audit teams. Lead and develop a team of risk professionals to drive continuous improvement and strengthen risk maturity.
Required Qualifications
- A strong background in IT, Information Security, Technology Risk, IT Audit or a related discipline
- Practical knowledge of information security controls, cyber risk, data protection and technology risk frameworks such as ISO 27001 or NIST
- Experience operating within a regulated environment, ideally Financial Services
- A solid understanding of risk management, governance and control frameworks, with the ability to assess risks and identify opportunities for improvement
- Excellent analytical and problem-solving skills, with the ability to interpret complex information and translate it into clear, actionable insights
- Experience reviewing technology and security controls and providing constructive challenge to drive positive outcomes
- Strong communication and stakeholder management skills, with the ability to engage and influence colleagues at all levels
- Experience producing high-quality reports and presenting findings to senior leaders, committees and governance forums
- Previous people management or leadership experience, with a passion for developing and coaching others
- Full right to work in the UK
Desired Qualifications
- Professional qualifications such as CISA, CISSP, CISM, CRISC, IRM or equivalent
- Experience of IT audit, SOX controls, operational resilience, third-party risk management or technology transformation programmes
- Knowledge of collections operations, customer data management and associated regulatory requirements
- Experience working within financial services, banking, investments or other highly regulated industries
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.