Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead and support IT risk management, focusing on Technology and AI standards.
- Company: Join Phoenix Group, a leading FTSE 100 savings and retirement business.
- Benefits: Enjoy flexible working, up to £70,000 salary, bonuses, and 38 days annual leave.
- Why this job: Be part of a team tackling key issues like net zero by 2050 while developing your career.
- Qualifications: Experience in managing Technology Risk in regulated industries is essential; AI knowledge preferred.
- Other info: We welcome diverse applicants and offer adjustments during the recruitment process.
The predicted salary is between 42000 - 70000 £ per year.
We have an incredible opportunity to join us here at Phoenix Group as an IT Risk Manager within Group Risk. Do not pass up this chance, apply quickly if your experience and skills match what is in the following description.
Job Type: Permanent, Tech & Cyber Specialist Band 1, UK
Location: Hybrid: this role could be based in either our Edinburgh, London or Wythall/Birmingham offices, with time spent working weekly in both the office and at home. The amount of time working from the office is variable based on business need.
Flexible working: All of our roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process.
Closing Date: Tuesday 8th July 2025
Salary and benefits: Up to £70,000, dependent upon experience, plus 16-32% bonus potential, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more.
The role Non-Financial Risk is part of Group Risk and has a fantastic opportunity for a talented individual to join the team as an IT Risk Manager within the newly forming IT/IS/Resilience and Supplier Risk Oversight Team. The role is to provide Second Line Subject Matter Expert (SME) advice, oversight and challenge on Line 1's design and operation of their Technology and Artificial Intelligence (AI) related standards, risks and controls.
The role holder will, in addition to regular oversight of the Tech and AI risk and controls environment, both lead and support the delivery of a rolling programme of Thematic and Risk based, Technology & AI focused reviews, following a structured methodology. This will involve shaping the scope of reviews, preparing for and performing field work, validation of proposed findings and provision of insightful recommendations to Line 1 through clear written reporting.
- Provide ongoing oversight and challenge to Line 1 led Technology/AI risk and control management
- Analyse and interpret key risk indicators and risk and control reporting to help determine where Line 2 effort is best focused, and to develop formal Line 2 opinions on Technology & AI matters
- Provide insight, oversight and challenge within assigned monthly Technology Risk and Issue Forums, and other relevant Technology & AI Governance forums
- Lead Line 2 led Tech/AI focused Thematic/Risk Reviews throughout the full lifecycle, including Planning/Terms of Reference, Fieldwork, Findings Validation and Reporting stages
- Provide Technology/AI Risk oversight and challenge on material Projects and Programmes
- Oversee Line 1 activity to ensure adherence to the Group's Risk Management Framework, providing advice and guidance as required
- Support the broader team with assigned Line 2 activity relating to Information/Cyber Security, Operational Resilience and Third-Party Management
- Develop and build relationships with Line 1 and Line 3 peer stakeholders
What are we looking for?
- Essential: Proven experience managing Technology Risk (including third party oversight), in either a first or second-line capacity, within a high regulated UK industry such as Financial Services
- Essential: Strong stakeholder, relationship management and influencing skills. An accomplished communicator who is comfortable, respectful and calm during sometimes challenging situations where differences of risk opinion need to be clearly positioned and justified. Able to analyse situations in a timely manner, producing clear, insightful and succinct written reports.
- Preferred: Knowledge of Artificial Intelligence (AI) - naturally curious about AI and the advantages it can bring to organisations, in balance with controlling risks
- Preferred: Knowledge of cloud computing, shared responsibility models and associated common risks
- Preferred: A career background of having worked in IT for large UK corporations, either in Service Operations, Architecture or Engineering, with a solid baseline understanding of IT Risk Management, ITIL and COBIT frameworks
We want to hire the whole version of you. We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we've advertised and you believe that you can bring value to the role, we'd love to hear from you.
If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.
Please note that we reserve the right to remove adverts earlier than the advertised closing date. We encourage you to apply at the earliest opportunity.
IT Risk Manager employer: Phoenix Group
Contact Detail:
Phoenix Group Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land IT Risk Manager
✨Tip Number 1
Familiarise yourself with the latest trends in IT risk management, especially around Technology and AI. Being able to discuss current challenges and solutions in these areas during your interview will show that you're not just knowledgeable but also genuinely interested in the field.
✨Tip Number 2
Network with professionals in the industry, particularly those who work in risk management within financial services. Engaging in conversations about their experiences can provide you with valuable insights and may even lead to referrals or recommendations.
✨Tip Number 3
Prepare to demonstrate your stakeholder management skills. Think of examples where you've successfully navigated challenging discussions or influenced decisions regarding risk. This will be crucial as the role requires strong communication and relationship-building abilities.
✨Tip Number 4
Research Phoenix Group's approach to risk management and their initiatives towards net zero by 2050. Showing that you understand their values and goals will help you align your answers with what they are looking for in a candidate.
We think you need these skills to ace IT Risk Manager
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights your experience in managing Technology Risk, especially within regulated industries. Use specific examples that demonstrate your skills in stakeholder management and communication.
Craft a Compelling Cover Letter: In your cover letter, express your enthusiasm for the role at Phoenix Group. Mention your understanding of their mission and how your background aligns with their needs, particularly in Technology and AI risk management.
Highlight Relevant Skills: Clearly outline your knowledge of Artificial Intelligence, cloud computing, and IT Risk Management frameworks like ITIL and COBIT. This will show that you are well-versed in the key areas relevant to the position.
Proofread and Edit: Before submitting your application, carefully proofread all documents for spelling and grammatical errors. A polished application reflects your attention to detail, which is crucial for an IT Risk Manager.
How to prepare for a job interview at Phoenix Group
✨Understand the Role
Make sure you thoroughly understand the responsibilities of an IT Risk Manager. Familiarise yourself with key concepts like Technology Risk, AI governance, and the Group's Risk Management Framework. This will help you answer questions confidently and demonstrate your knowledge.
✨Prepare for Scenario-Based Questions
Expect to face scenario-based questions that assess your problem-solving skills and ability to manage risks. Think of examples from your past experience where you've successfully navigated challenges in technology risk management, and be ready to discuss them in detail.
✨Showcase Your Communication Skills
As a role that requires strong stakeholder management, be prepared to showcase your communication skills. Practice articulating complex ideas clearly and succinctly, as well as how you would handle challenging conversations regarding differing risk opinions.
✨Demonstrate Curiosity About AI
Since knowledge of Artificial Intelligence is preferred, show your curiosity about AI and its implications for risk management. Be ready to discuss how AI can enhance processes while also addressing potential risks, demonstrating your balanced perspective on the topic.
