> Markdown version of [/jobs/ext/2022418-it-risk-and-control-specialist](https://www.wearedevelopers.com/jobs/ext/2022418-it-risk-and-control-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Risk and Control Specialist

- **Company:** Pgc Gcoo Technology
- **Location:** UK
- **Contract:** Permanent contract
- **Skills:** Confluence, JIRA, Cyber Security, Extract Transform Load (ETL), Identity and Access Management, Power BI, Software Vulnerability Management, Software Security, Control M
- **Published:** August 11, 2026
- **Apply:** https://testqtech.com/career-job-details/5910

## About the Role

* Solid understanding of IT Risk and Control Management including risk management frameworks
 * Strong analytical skills with experience interpreting patching and vulnerability reports
 * Specific experience of working with at least one of the controls would be beneficial
 * Ability to assess threats controls and vulnerabilities and communicate findings effectively to both technical and business audiences
 * Excellent written and verbal communication skills
 * Proven experience in security concepts and principles with knowledge of network host and application security practices
 * Handson experience with tools such as Cyberport Cyberflows Power BI Confluence and Jira, Mandatory Skills : BMC Control-M, Risk Management (Credit/Market/IT/Ops)

## Description

* Join our dynamic team as an IT Risk and Control Specialist where youll play a pivotal role in safeguarding and enhancing the technology landscape supporting our People Governance and Communications functions Youll collaborate across multiple internal teams to drive robust risk management control practices and process improvements ensuring our systems and workplace technologies remain secure efficient and resilient, * Build Trusted Partnerships
 * Develop strong working relationships with the People Governance Communications Group COO Technology ITSO community technical leads developers and architects to understand endtoend services and proactively identify control gaps
 * Risk Control Leadership
 * Work closely with Cybersecurity teams senior management and business stakeholders to address potential security issues and ensure best practices are embedded across all technology functions
 * Process Tool Enhancement
 * Contribute to the identification and improvement of processes procedures and tools that support effective risk management and control
 * Lifecycle Management
 * Champion best practices in Software Life Cycle Management including Identity Access Management IDAM Evergreening and Data Movement DMOV to mitigate cyber risks and ensure compliance
 * Vulnerability Management
 * Design and implement vulnerability reporting and monitoring solutions for key stakeholders from engineers to CIOs Liaise with technology product owners and ITSOs to support timely remediation of identified risks
 * Patch Remediation Coordination
 * Collaborate with cybersecurity teams to understand patching requirements and ensure vulnerabilities are addressed within agreed timelines
 * Documentation Reporting
 * Maintain and update process guides support control remediation activities and create insightful reports and presentations for senior stakeholders and governance forums
 * Continuous Improvement
 * Stay abreast of industry trends and best practices sharing knowledge and insights with the wider team to foster a culture of continuous learning and improvement


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Brewing Tea over the Internet](https://www.wearedevelopers.com/videos/697-brewing-tea-over-the-internet)
- [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Business Strategies for Scaling European Tech](https://www.wearedevelopers.com/videos/1694-business-strategies-for-scaling-european-tech)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)