AVEVA is creating software trusted by over 90% of leading industrial companies.
Job Title: IT Risk - Senior Manager
Location: London or Cambridge
Employment Type: Full-time / Hybrid (50% in office)
The job
As a software business, technology risk and cyber/security risk directly impact product availability, customer trust, and regulatory commitments. The IT Risk Senior Manager is accountable for running a consistent, evidence-based technology risk lifecycle IT, ensuring risks are identified, assessed, treated, monitored, and reported in line with risk appetite.
The IT Risk Senior Manager will be responsible for the management of all risks across IT. The role will have close ties with the Enterprise Risk Management Team ensuring alignment and regular cadence. Further, collaboration with the Security Risk Management Team will be essential ensuring alignment on ways of working, best practice, and ongoing operational risk management.
Based on industry best practice, the individual will guide our function to a robust Risk Management service, providing insight and reporting to the IT Leadership teams as well as Enterprise Risk Management and Security Risk Committees. Working closely with other IT functions, the role will be responsible for maturing the IT Risk Framework, driving standards, understanding and engagement.
You will be responsible for following risks through from initiation to mitigation and ensuring the overall risk appetite is understood and actively managed. The role will leverage Riskonnect , our corporate GRC system, to manage the technology risk register, action tracking, and reporting.
Key responsibilities
Responsible for IT Risk Management and adherence to the Enterprise Risk Management Framework and Taxonomy
Produce governance materials for the IT Leadership Team, Enterprise Risk Management and Security Risk Management forums
Evaluate new risks and identify and assess impact to the business and IT and develop appropriate treatment plans
Drive alignment between IT, Security and Enterprise Risk Management on how risks are captured, scored, and reported
Provide risk escalation management and guidance
Proactively track and manage IT Risks and treatment plans using standard tooling and a clear framework assuring high data quality
Ensure IT risks are actively raised, understood and managed from audits, projects, incidents and other BAU activities
Ensure risks have pragmatic, time-bound treatment plans; track delivery and escalate slippage or risk appetite breaches
Responsible for keeping IT Policy and supporting operating procedures up to date
Lead IT Risk Management training sessions and briefings in line with maturity and best practice
Mature IT Risk Appetite Metrics. KRI’s and KPIs and mature reporting and relevant dashboards
Identify AI use cases for improving risk management processes and ways of working
Take ownership of risks arising from audits and follow through to completion
Identify opportunities to streamline and improve the risk management process
Coach more junior team members to drive maturity of IT GRC risk service
Essential requirements
Demonstrable experience in technology risk, IT GRC, cyber risk, operational risk, or IT audit within a technology-led organisation (software/SaaS preferred).
Minimum of 10 years’ experience across IT and Security working in global environments
Strong knowledge of core technology & cyber risk domains: IAM/PAM, vulnerability and patch management, secure configuration, cloud risk, logging/monitoring, incident learnings, backup/DR and resilience, change/release risk.
Strong leadership skills demonstrating ability to present articulately and concisely
Excellent presentation skills, able to coordinate and facilitate workshops for technical teams across AVEVA
5+ years of leading IT risk management in a complex environment
Understanding of industry best practices for Risk Management across IT, AI and CyberSecurity
Growth mindset to learn and engage with new technologies
Must be…