IT Risk and Cyber Controls Specialist

An IT Risk and Cyber Controls specialist is responsible for designing and implementing IT control frameworks, embedding a risk culture, and collaborating with various teams to enhance security and compliance. They oversee governance, monitor control effectiveness, and support assurance activities, ensuring alignment with regulatory standards such as UK Corporate Governance Code, provision 29. The role involves assessing IT risks across cybersecurity, data privacy, and operational technology, as well as leading training initiatives to promote understanding of IT risk management. Candidates should possess experience in IT risk, audit, or governance, and familiarity with control frameworks like IT SOX, COBIT, and ISO27001. Strong communication skills, knowledge of SAP, and experience with automation tools are essential for success.