Technology Risk and Compliance Manager

We have an exciting opportunity for an experienced Risk and Compliance manager to join an Information Security team within the insurance industry.

This is a hybrid role with the requirement to work 2 days a week from either our Manchester, Stoke, Chesterfield, Peterborough or Tunbridge Wells office.

Role Purpose

The Technology Risk Manager plays a pivotal role in shaping and embedding the organisation's technology risk strategy, ensuring that technology-related risks are effectively identified, assessed, and managed in alignment with the organisation's strategic objectives, risk appetite, and regulatory obligations.?

The role serves as a critical link between business strategy, technology delivery, and risk governance, translating complex risk exposures into actionable insights, control requirements, and risk mitigation strategies. Through effective challenge, influence, and collaboration, the Technology Risk Manager promotes a strong risk culture and ensures that risk considerations are embedded within key technology and business decisions.?

The position is accountable for maintaining visibility of technology risk exposure and ensuring appropriate mitigation and governance across the organisation.?

Key Accountabilities and Responsibilities

• Identify, assess, and manage technology-related risks, including risks arising from infrastructure, applications, cloud services, and third-party providers.?
• Maintain and operate the technology risk management framework, ensuring consistent risk identification, assessment, and treatment.?
• Ensure risks are assessed in line with enterprise risk management (ERM) processes and aligned to risk appetite.?
• Track and manage risk registers, issues, and remediation actions.?
• Support governance processes by providing accurate and timely risk reporting.?
• Develop and maintain risk metrics, KPIs, and KRIs.?
• Escalate material risks and issues through appropriate governance forums and committees.?
• Ensure clear documentation of risk decisions, acceptances, and mitigations.?
• Support compliance with regulatory, legal, and internal policies related to technology risk.?
• Assess and manage risks associated with third-party technology providers.?
• Provide expert advice to technology and business stakeholders on managing technology risk.?
• Translate technical risks into clear business impacts and recommendations.?
• Support initiatives to improve risk maturity, automation, and reporting capabilities.?

Skills, Experience and Knowledge

• Experience in technology risk, IT risk management, or information security roles.?
• Strong understanding of, technology risk management frameworks and methodologies and enterprise risk management principles?.
• Strong ability to identify, assess, and prioritise risks based on likelihood and impact.?
• Experience maintaining and analysing risk registers, metrics, and reporting.?
• Ability to evaluate control effectiveness and residual risk.?
• Strong communication skills, able to articulate risks in business-relevant terms.?
• Ability to influence stakeholders and support risk-informed decision-making.?

Benefits

• Starting with 25 days annual leave which increases with service

• Opportunity for a yearly bonus
• Private Medical Insurance
• Life Assurance 4x annual salary
• Collaborative, fast paced working environment
• Hybrid Working
• Modern, vibrant offices