IT Risk & Governance Manager - UK (Remote)

A global organisation is looking to appoint an experienced IT Risk & Governance Manager to strengthen its risk management, governance and compliance frameworks across a complex IT and Operational Technology (OT) environment.

This is a great opportunity for someone with a strong background in IT risk and governance who enjoys taking ownership of risk frameworks, managing compliance against recognised standards and working with senior stakeholders to drive continuous improvement across the business.

Key Responsibilities

• Own and maintain the IT risk register, identifying, assessing and prioritising risks across IT and OT environments
• Develop and implement consistent risk assessment methodologies and oversee risk treatment plans through to closure
• Manage group-wide IT policies, standards, procedures and governance documentation
• Lead compliance activities against ISO 27001, ISO 20000 and NIST frameworks
• Coordinate internal and external audits, manage certification requirements and track findings through to resolution
• Oversee third-party and supplier risk assessments, due diligence and ongoing compliance monitoring

Skills & Experience

• Proven experience in IT risk management, IT governance or a related information security discipline
• Strong working knowledge of ISO 27001, ISO 20000, NIST, COBIT or similar governance frameworks
• Experience managing risk registers, risk assessments and risk treatment plans
• Background coordinating audits, certification processes, evidence gathering and remediation activities
• Understanding of IT and OT environments, including their associated risks and controls
• Experience with third-party risk management, supplier assessments and compliance monitoring