IT Risk and Control Manager

Eg Group
Bolton, UK
2 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
4 years minimum
Working hours
Regular working hours

Tech stack

Control Objectives for Information and Related Technology (COBIT) IT Management IT General Controls (ITGC)

Job description

Experteer Overview In this role you will strengthen EG Group’s IT risk and control capability within a global IT governance framework. You’ll work with IT colleagues, control owners and operators to implement and assess IT controls, driving improvements across processes and policies. You will help translate risk findings into actionable remediation and support audit and governance activities. This is a growth-oriented opportunity to shape controls in a fast-moving, international business. Pay / Benefits * Implement IT controls in line with the IT Control framework and ICFR programme * Design and deliver new IT controls, including third-party reliance * Lead deep-dive assessments with project teams and drive remediation * Identify opportunities to centralise and automate controls and processes * Support information delivery for Audit, Risk and Board meetings * Coordinate with internal/external audit and business stakeholders * Monitor project pipeline and conduct landscape reviews for new applications * Build global relationships to act as an IT risk and control advisor * Promote a strong risk and control culture across the organisation Tasks * Degree/qualification with professional credentials such as CISA or CRISC (or equivalent) * 4+ years’ experience in IT internal or external audit in a large corporate environment * Experience designing and documenting IT General Controls (access, change, operations) * Working knowledge of COBIT and ITIL frameworks * Experience performing IT risk assessments across IT domains * Strong analytical, problem-solving and reporting skills * Organised, methodical with ability to manage multiple projects with limited supervision * Strong project management and change management capabilities * Comfort liaising with audit and business stakeholders Key requirements * Discretionary performance bonus * Hybrid working up to 2 days/week * Salary sacrifice options (Cycle to Work, Car Scheme) * Enhanced Maternity & Paternity leave * Generous annual leave entitlement * On-site free parking

Requirements

for new applications * Build global relationships to act as an IT risk and control advisor * Promote a strong risk and control culture across the organisation Tasks * Degree/qualification with professional credentials such as CISA or CRISC (or equivalent) * 4+ years’ experience in IT internal or external audit in a large corporate environment * Experience designing and documenting IT General Controls (access, change, operations) * Working knowledge of COBIT and ITIL frameworks * Experience performing IT risk assessments across IT domains * Strong analytical, problem-solving and reporting skills * Organised, methodical with ability to manage multiple projects with limited supervision * Strong project management and change management capabilities * Comfort liaising with audit and business stakeholders Key requirements * Discretionary performance bonus * Hybrid working up to 2 days/week * Salary sacrifice options (Cycle to Work, Car Scheme) * Enhanced Maternity & Paternity aaar _ * Generous annual leave entitlement * On-site free parking

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on eu.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:17 min

Governing enterprise IT as a global automotive CIO

Katrin Lehmann Katrin Lehmann +1 · Coffee With Developers

1:26 min

Bridging the sim-to-real gap with multi-control networks

Alexander Schwarz Alexander Schwarz · WWC 2025

1:53 min

Managing infrastructure limitations with managed Amazon Aurora databases

Dharin Shah Dharin Shah · WWC 2025

2:49 min

Verifying dependency metadata accuracy through controlled package installations

Uwe Korn Uwe Korn · WWC Europe 2026

5:00 min

Managing complex state with scope-based resource management

Bjarne Stroustrup · WWC 2022

5:13 min

Audience Q&A on maturity assessments and external consultants

Mathias Tausig · LIVE

Videos

See all

Related articles

See all