> Markdown version of [/jobs/ext/2252322-risk-assurance-manager-it-cyber](https://www.wearedevelopers.com/jobs/ext/2252322-risk-assurance-manager-it-cyber). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Risk & Assurance Manager - IT & Cyber - **Company:** Audit & Risk Recruitment - **Location:** Manchester, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Identity and Access Management, Software Vulnerability Management, IT General Controls (ITGC), Information Technology, CIS Benchmarks - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815096093-risk--assurance-manager-it--cyber ## About the Role * Minimum 5 years of experience in second-line risk management or internal audit, with a strong focus on IT or Information Security. * Experience in consultancy or professional services, with a proven ability to support complex transformation or change programmes is preferred. * Demonstrated leadership in delivering IT risk or audit initiatives, including managing projects, mentoring team members, and driving outcomes. * Strong knowledge of industry frameworks and standards, such as ISO 27001, NIST, CIS Controls, and regulatory requirements like GDPR. * Proven ability to engage and influence stakeholders across IT, Information Security, and business functions, building trusted relationships at all levels. Flexibility * Hybrid working - 3 days in the office and 2 days working from home * Working flexible hours - flexing the times you start and finish during the day * Flexibility around school pick up and drop offs ## Description Audit & Risk Recruitment provided pay range This range is provided by Audit & Risk Recruitment. Your actual pay will be based on your skills and experience - talk with your recruiter to learn more. Base pay range Direct message the job poster from Audit & Risk Recruitment. Audit & Risk Recruitment are working on a fantastic Technology Risk and Assurance opportunity for a large Technology business. This role focuses on managing and enhancing the IT and Information Security risk landscape. Reporting directly to the Head of Risk and Assurance, you will play a key role in embedding effective risk management practices across the company's technology and cybersecurity domains. Responsibilities * Partnering with senior IT, Security, and business leaders to embed risk management practices into operational processes and strategic initiatives. * Owning and maintaining IT Risk and Control Matrices (RCMs), ensuring they remain current, comprehensive, and aligned with industry standards and audit expectations. * Reviewing effectiveness of first line functions in testing and validation of key IT controls (e.g., access management, change control, incident response, vulnerability management), ensuring effectiveness and consistency. * Leading in the review and enhancement of IT and infosec risk and control frameworks (e.g., ISO 27001, ITIL, ISO22301, NIST), ensuring alignment with business objectives and regulatory requirements. * Coordinating and representing IT risk in internal, external audits and certification processes (e.g., ISO 27001, Cyber Essentials, ISO22301, etc.), acting as the primary point of contact. Qualifications * Minimum 5 years of experience in second-line risk management or internal audit, with a strong focus on IT or Information Security. * Experience in consultancy or professional services, with a proven ability to support complex transformation or change programmes is preferred. * Demonstrated leadership in delivering IT risk or audit initiatives, including managing projects, mentoring team members, and driving outcomes. * Strong knowledge of industry frameworks and standards, such as ISO 27001, NIST, CIS Controls, and regulatory requirements like GDPR. * Proven ability to engage and influence stakeholders across IT, Information Security, and business functions, building trusted relationships at all levels. Flexibility * Hybrid working - 3 days in the office and 2 days working from home * Working flexible hours - flexing the times you start and finish during the day * Flexibility around school pick up and drop offs Seniority level Mid-Senior level Employment type Full-time Job function Information Technology Industries Technology, Information and Media ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Why Your Next Best Talent Might Not Be in Your Neighborhood](https://www.wearedevelopers.com/videos/1861-why-your-next-best-talent-might-not-be-in-your-neighborhood) - [OPA for the cloud natives](https://www.wearedevelopers.com/videos/713-opa-for-the-cloud-natives) ## Related Articles - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Best Job Boards for Remote Work for Developers](https://www.wearedevelopers.com/magazine/290-best-job-boards-for-remote-work-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Mastering Remote Work: Tips for Developers](https://www.wearedevelopers.com/magazine/558-mastering-remote-work-tips-for-developers) - [Remote, Hybrid, or In-Office: What’s Really Best for Developers?](https://www.wearedevelopers.com/magazine/638-remote-hybrid-or-in-office-what-s-really-best-for-developers)