IT Risk - Senior Manager

AVEVA is creating software trusted by over 90% of leading industrial companies.

The job involves managing technology risk and cyber/security risk, which directly impact product availability, customer trust, and regulatory commitments. The IT Risk Senior Manager is accountable for running a consistent, evidence-based technology risk lifecycle, ensuring risks are identified, assessed, treated, monitored, and reported in line with risk appetite. This role will have close ties with the Enterprise Risk Management Team and collaboration with the Security Risk Management Team.

Key responsibilities:

• Responsible for IT Risk Management and adherence to the Enterprise Risk Management Framework and Taxonomy.
• Produce governance materials for the IT Leadership Team, Enterprise Risk Management and Security Risk Management forums.
• Evaluate new risks and identify and assess impact to the business and IT, developing appropriate treatment plans.
• Drive alignment between IT, Security and Enterprise Risk Management on how risks are captured, scored, and reported.
• Provide risk escalation management and guidance.
• Proactively track and manage IT Risks and treatment plans using standard tooling and a clear framework assuring high data quality.
• Ensure IT risks are actively raised, understood and managed from audits, projects, incidents and other BAU activities.
• Ensure risks have pragmatic, time-bound treatment plans; track delivery and escalate slippage or risk appetite breaches.
• Responsible for keeping IT Policy and supporting operating procedures up to date.
• Lead IT Risk Management training sessions and briefings in line with maturity and best practice.
• Mature IT Risk Appetite Metrics, KRI’s and KPIs and mature reporting and relevant dashboards.
• Identify AI use cases for improving risk management processes and ways of working.
• Take ownership of risks arising from audits and follow through to completion.
• Identify opportunities to streamline and improve the risk management process.
• Coach more junior team members to drive maturity of IT GRC risk service.

Essential requirements:

• Demonstrable experience in technology risk, IT GRC, cyber risk, operational risk, or IT audit within a technology-led organisation (software/SaaS preferred).
• Minimum of 10 years’ experience across IT and Security working in global environments.
• Strong knowledge of core technology & cyber risk domains: IAM/PAM, vulnerability and patch management, secure configuration, cloud risk, logging/monitoring, incident learnings, backup/DR and resilience, change/release risk.
• Strong leadership skills demonstrating ability to present articulately and concisely.
• Excellent presentation skills, able to coordinate and facilitate workshops for technical teams.
• 5+ years of leading IT risk management in a complex environment.
• Understanding of industry best practices for Risk Management across IT, AI and CyberSecurity.
• Growth mindset to learn and engage with new technologies.
• Must be able to work independently as well as collaborating in cross-functional teams.
• The ability to build strong relationships with internal and external stakeholders.
• Excellent communicator, both written and spoken.
• Experience of working with regulatory frameworks such as SOX and NIST.
• Riskonnect Experience preferred.
• Strong Excel/PowerPoint skills; BI/reporting tools.

Benefits:

• Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave (plus bank holidays), pension, life cover, private medical insurance, parental leave, education assistance program.

We work in a hybrid way at AVEVA, with an expectation of being on-site 50% of your working hours to support collaboration and connection.

AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.

AVEVA is an Equal Opportunity Employer, committed to being an exemplary employer with an inclusive culture.