> Markdown version of [/jobs/ext/2238723-it-risk-control-manager](https://www.wearedevelopers.com/jobs/ext/2238723-it-risk-control-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Risk & Control Manager

- **Company:** Audit & Risk Recruitment
- **Location:** Bolton, UK
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Control Objectives for Information and Related Technology (COBIT), IT General Controls (ITGC)
- **Published:** August 26, 2026
- **Apply:** https://www.collegerecruiter.com/job/2815083722-it-risk--control-manager

## About the Role

* Qualified to degree level with CISA, CRISC or similar professional qualifications / QBE
 * 4 years minimum experience of working within IT Risk and Control
 * Confident in designing and documenting new and/or existing IT General Controls from across access, change, and operations domains drawing on experience to do so independently and/or with minimal support.
 * Working knowledge of COBIT/ITIL Frameworks

## Description

The Audit & Risk Recruitment company is working with a rapidly growing retail business to help them find a IT Risk and Control Manager. They are looking for an analytical and motivated individual to work closely with UK and Global colleagues to develop an IT Risk and Control capability.

This role will involve working very closely with our IT colleagues, Control Owners, and Operators to deliver new IT controls, assess technology risks and continually assess and enhance processes, policies, standards. This is a great time to join us at a period of significant growth, change and opportunity.

What you'll be doing:

 * Perform IT Control implementation in line with EG's IT Control framework and the ICFR Programme (Internal Controls over Financial Reporting).
 * Support and manage the design and implementation of new IT controls, including those with a reliance on 3rd party suppliers.
 * Work with the existing IT Programme Assurance team and IT stakeholders to perform deep dive assessments, plan and drive through remediation to completion.
 * Proactively look for opportunities to centralise and automate controls and processes to drive efficiency using existing tools and technologies.
 * Support the Head of IT Risk in collation and delivery of information for Audit, Risk and Board meetings.
 * Support rollout of new Cyber Initiatives
 * Build relationships globally to become a trusted advisor to our colleagues in IT/cyber
 * Ensure that risks and issues identified are reported and escalated in line with the governance framework.

What we're looking for:

 * Qualified to degree level with CISA, CRISC or similar professional qualifications / QBE
 * 4 years minimum experience of working within IT Risk and Control
 * Confident in designing and documenting new and/or existing IT General Controls from across access, change, and operations domains drawing on experience to do so independently and/or with minimal support.
 * Working knowledge of COBIT/ITIL Frameworks


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Create DSL (Domain Specific Language) on top of Swift](https://www.wearedevelopers.com/videos/707-create-dsl-domain-specific-language-on-top-of-swift)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Answering the Million Dollar Question: Why did I Break Production?](https://www.wearedevelopers.com/videos/1171-answering-the-million-dollar-question-why-did-i-break-production)
- [NoCode LiveCode: Leveraging AI Tools to Craft Fully Functional Apps!](https://www.wearedevelopers.com/videos/1169-nocode-livecode-leveraging-ai-tools-to-craft-fully-functional-apps)

## Related Articles

- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [How to Write a CV and Interview if You Don't Fully Qualify For The Job](https://www.wearedevelopers.com/magazine/183-how-to-write-a-cv-and-interview-if-you-don-t-fully-qualify-for-the-job)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)