IT Risk Management & Compliance Specialist
Job Description & How to Apply Below
12-Month Contract (Potential for Extension)
About the RoleWe are seeking an experienced IT Risk Management & Compliance Specialist to support a major enterprise organisation in strengthening its technology risk management, governance, and compliance capabilities.
This role will play a key part in improving visibility of technology risks, driving risk remediation activities, supporting audit and compliance initiatives, and enhancing overall governance across the IT landscape.
The successful candidate will work closely with IT, Cybersecurity, Internal Audit, Compliance, and business stakeholders to ensure effective risk management practices are embedded across the organisation.
Key Responsibilities- Maintain and manage IT risk registers, control inventories, remediation trackers, and compliance evidence repositories.
- Conduct and support IT risk assessments across infrastructure, cloud platforms, applications, identity and access management, and third-party services.
- Monitor risk treatment plans, overdue actions, control deficiencies, and remediation progress.
- Partner with technology, cybersecurity, audit, and compliance teams to address findings and strengthen control effectiveness.
- Prepare executive-level reports, dashboards, risk summaries, and governance updates.
- Support internal and external audits by coordinating evidence collection, validating responses, and tracking remediation activities.
- Assist with the implementation and alignment of IT controls against recognised frameworks and regulatory requirements.
- Identify control weaknesses, recurring issues, and opportunities to improve governance, risk, and compliance processes.
- Contribute to the ongoing maturity and effectiveness of the organisation's IT risk management framework.
- 5+ years of experience in IT Risk Management, Technology Governance, Compliance, Internal Audit, Cybersecurity Governance, or Technology Assurance.
- Strong understanding of IT controls, risk assessment methodologies, audit processes, and compliance reporting.
- Experience supporting risk and compliance programmes within complex enterprise environments.
- Knowledge of technology risk across cloud, infrastructure, applications, identity management, and third-party risk domains.
- Ability to engage effectively with both technical and non-technical stakeholders.
- Experience working within regulated industries such as Financial Services, Government, Energy, Utilities, Telecommunications, or Critical Infrastructure.
- Familiarity with one or more industry frameworks, including:
- ISO 27001
- NIST Cybersecurity Framework (CSF)
- COBIT
- ITIL
- Experience supporting regulatory reviews, compliance assessments, or technology audits.
- Relevant certifications such as CRISC, CISA, CISSP, ISO 27001 Lead Implementer/Auditor, or similar are highly desirable
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×