> Markdown version of [/jobs/ext/2815973-it-risk-and-cyber-controls-specialist](https://www.wearedevelopers.com/jobs/ext/2815973-it-risk-and-cyber-controls-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Risk and Cyber Controls specialist

- **Company:** Audit & Risk Recruitment
- **Location:** Birmingham, UK
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Control Objectives for Information and Related Technology (COBIT), Encodings, Cyber Security, SAP Knowledge Warehouse, Software Vulnerability Management, IT General Controls (ITGC), GPT
- **Published:** September 10, 2026
- **Apply:** https://www.collegerecruiter.com/job/2859577066-it-risk-and-cyber-controls-specialist

## About the Role

* Experience in IT Risk, Audit, or Governance
 * Knowledge of control frameworks (IT SOX, ICFR, UK Corporate Governance Code)
 * Strong understanding of IT controls (access, change, operations)
 * Cyber controls experience/exposure to cyber frameworks such as NIST, COBIT and ISO27001
 * Experience working in complex or decentralised environments
 * Excellent communication and ability to challenge constructively
 * SAP knowledge
 * Experience with automation / AI tools (e.g. Copilot, ChatGPT)

## Description

We're looking for a strategic and proactive IT Risk and Cyber Controls advisor help lead the development of a forward-thinking risk and controls framework. This role offers significant autonomy and influence and you'll have rein to shape the direction of IT risk and controls across the organisation, aligned with regulatory expectations including Provision 29 of the UK Corporate Governance Code, working closely with the IT controls manager and advisor alongside senior stakeholders across the business.

You'll be instrumental in embedding a strong IT controls and Cyber culture, collaborating across teams to build a resilient and secure technology environment that supports the business's growth and governance ambitions. Backgrounds in IT SOX, ITGCs, IT Risk, IT controls and Cyber controls in a FTSE 250 business and/or professional services firm would be beneficial., * Lead the design and implementation of a fit-for-purpose IT Controls, Cyber controls and IT Risk framework from the ground up.

 * Embed a risk culture aligned with Provision 29, ensuring robust internal controls for effective risk management.
 * Strengthen governance through policies, standards, and control documentation
 * Monitor control effectiveness and drive remediation of deficiencies
 * Lead monthly IT control reporting and governance forums
 * Provide oversight across key cyber domains (DR, BCP, vulnerability management, patching)
 * Support Internal Audit and external assurance activity
 * Deliver insight on emerging risks and continuous improvement opportunities
 * Identify, assess, and mitigate IT risks, covering cybersecurity, data privacy, infrastructure, and operational technology.
 * Work collaboratively with technology and business units to integrate risk considerations into all projects and operations.
 * Stay ahead of evolving threats and industry best practices.
 * Lead training and awareness initiatives across the organisation to strengthen understanding and ownership of IT risk.


## Related Videos

- [Responsible AI @ Microsoft - Governance, Standards, Learnings](https://www.wearedevelopers.com/videos/1544-responsible-ai-microsoft-governance-standards-learnings)
- [ Evaluating AI models for code comprehension](https://www.wearedevelopers.com/videos/1462-evaluating-ai-models-for-code-comprehension)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [A Brief History of Data Storage](https://www.wearedevelopers.com/videos/974-a-brief-history-of-data-storage)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Speak, Code, Deploy: Transforming Developer Experience with Voice Commands](https://www.wearedevelopers.com/videos/1159-speak-code-deploy-transforming-developer-experience-with-voice-commands)

## Related Articles

- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)