IT Risk and Control Manager

Blackburn, Lancashire
EG Group

Role: IT Risk and Control Manager

Location: Blackburn, BB1 2FA

Contract: Full Time / Permanent

Salary: £65,500 & Bonus Scheme

Company: EG Group

About the role

Based in the UK within our IT Risk and Control Team a new and exciting opportunity has arisen to work closely with our UK and Global colleagues to develop our IT Risk and Control capability in line with our IT control framework.

The processes and controls that we are creating are designed to enhance maturity and provide enduring solutions to allow us to effectively manage technology risk.

The team currently operates as a hybrid 1st/2nd line function which involves working very closely with our IT colleagues, Control Owners, and Operators to deliver new IT controls, assess technology risks and continually assess and enhance processes, policies, standards.

Working as part of a small but growing team, you will be based at our EG Group Headquarters in Lancashire with hybrid and remote working options. This is a great time to join us at a period of significant growth, change and opportunity.

Duties and Responsibilities

• Build relationships and become trusted advisor to our colleagues in all things IT Risk and Control. You will be their go-to person for everything from General IT Risk advice to control implementation on transformation projects or providing valuable support during external audit reviews.
• Be proactive in driving forwards IT Control implementation in line with EG’s IT Control framework and the ICFR Programme (Internal Controls over Financial Reporting).
• Support and manage the design, implementation and embedding of new IT controls, including those with a reliance on 3rd party suppliers.
• Work with the existing IT Controls project teams and IT stakeholders to perform deep dive assessments, plan remediation activities and drive IT Control development through to completion, including routine testing over design and operation of controls.
• Work with existing transformation projects, to ensure that projects do not introduce avoidable operational risk, track remediation and act as SME throughout the journey.
• Assist and lead where required in the creation of new or revised policy and standards for IT and ensure the relevant local knowledge and support is provided as needed.
• Support Control Owners and Operators through 1-2-1 IT Risk and Control training, group sessions, and creating IT Risk and Control training packs as needed.
• Assist in the development of IT risk & control reporting and supporting wider Group IT reporting.
• Liaise with internal/external audit where required and align closely with our business colleagues.
• Collaborate with different business areas and country units to meet global IT Risk Management requirements.
• Lead on a variety of IT Risk initiatives and perform IT Risk Assessments as a subject matter expert, providing objective challenge and oversight to ensure that IT and security controls and approaches are observed, and risks and issues identified are reported and escalated in line with the governance framework.
• Help continue to build the IT Risk Framework, utilising best practice methodology.
• Drive an effective risk & control culture across EG Group, promoting accountability, responsibility, and action, acting as a risk & control ambassador to ensure best practices are shared and actions delivered.
• Proactively look for opportunity to centralise and automate controls and processes to drive efficiency.
• Help manage and develop our control management systems, ServiceNow, to ensure controls and issues are effectively operated and monitored.

Candidate Requirements

• 4 years minimum experience of working with or within IT internal audit/external audit teams within a big 4 or similar environment is essential.
• Confident in designing IT General Controls across access, change and operations domains.
• IT Controls Framework development or working knowledge of COBIT/ITIL Frameworks
• IT Controls testing, planning, management, and quality assurance to external audit standards.
• Comfortable performing IT Risk Assessments across a variety of IT domains.
• Knowledge of auditing or designing controls for ERP systems particularly SAP is desired.
• Issues/Actions management and developing mitigation and remediation strategies.
• Excellent interpersonal, communication and presentation skills.
• Strong analytical and problem-solving skills, being able to decipher sometimes complex information, analyse and report on for different audiences.
• Organised, methodical and capable of managing multiple projects at once with minimal supervision. Strong project management skills.
• Knowledge of Sarbanes Oxley (SOX) is helpful.
• Qualified to degree level with CISA, CRISC or similar professional qualifications. Candidates will also be considered with demonstrated time served experience.
• ITIL, COBIT knowledge areas will be helpful as would a background in Service Management, Cyber or IT Project Management.

Benefits & Rewards

• Performance Based Bonus Scheme.
• Employee Life Assurance.
• EG Group Discounts – up to 15% off at our stores and food to go restaurants.
• ASDA Discount Card – 10% off all ASDA stores.
• EG Cares Benefits – exclusive discounts across 900 retailers.
• Smart Health – 24/7 online GP access, health checks and health and wellbeing support.
• Employee Assistance Programme – access to our Wellbeing Centre which offers emotional & practical support including free financial advice.
• Learning & Development – access to our Learning Hub, the most extensive online course library in the world to support you with every step of your career at EG Group.
• Waterside Café – freshly prepared meals at affordable prices.
• Free Secure Car Parking.
• Dress Down Fridays.
• Flexi-Time.
• Prayer and Ablution Facilities.
• Sit / Stand Desk Facilities.
• Work Anniversary Rewards.
• Free Eye Test.