IT Controls Assurance Manager in Hatfield

Location: Hatfield (Hybrid working – 3 days in the office)

Working hours per week: 40 hours

Application Closing Date: 9th February 2026

About us

Our mission is to deliver joy in every shop, through unbeatable choice, unrivalled service, and reassuringly good value. We’re Ocado Retail, a market‑leading joint venture between Ocado Group and M&S, and the world’s largest dedicated online supermarket, ocado.com.

About the team and the role

Ocado Retail has a modern IT estate, operating a cloud‑first IT strategy with a preference for SaaS solutions, and operates a federated governance model across those SaaS solutions. As the IT Controls Assurance Manager, you will work directly with the Data & IT Governance Lead as a key figure in safeguarding Ocado Retail's technology landscape. You will be responsible for executing and managing the IT control assurance program across all IT solutions, and for periodically reviewing and developing the IT Controls Framework. This role is critical in providing executive management and external auditors with confidence in the design and operating effectiveness of our IT control environment.

What you’ll do

• Lead the ongoing delivery of a robust, risk‑based IT Controls Assurance Framework, aligned with key industry standards (e.g., ISO 27001, NIST, COBIT) and regulatory requirements (e.g., GDPR, UK Corporate Code of Governance).
• Orchestrate and support the self-assessment of IT controls by solution owners across IT and the wider business, and plan and execute periodic control testing and assurance reviews to evaluate design and operational effectiveness.
• Manage the tracking and timely remediation of control deficiencies, working closely with control owners and solution owners to ensure sustainable and effective fixes.
• Maintain the central repository of control documentation, testing evidence, and risk profiles.
• Develop and present clear, concise, and actionable reports on the status of the IT control environment to senior leadership and relevant governance committees.
• Act as a key point of contact for external auditors and internal audit teams regarding IT controls.

Who you are

• Proven experience in an IT Audit, IT Risk Management, or IT Controls Assurance role, ideally within a large, complex, and fast‑paced retail or financial services environment.
• Deep knowledge of IT control frameworks, including hands‑on experience in testing the design and operating effectiveness of IT Controls (e.g., Identity and Access Management, Change Management, Logical Access, Backup and Recovery).
• Excellent written and verbal communication skills, with the ability to translate technical control issues into business‑relevant language for executive audiences.
• Strong understanding of current and emerging technologies and their associated risks, including cloud environments (e.g., Google, Azure, AWS), SaaS, and AI.
• Relevant industry certification (e.g., CISA, CISSP, CRISC) and experience using GRC tooling (e.g., OneTrust) would be beneficial.

At Ocado Retail we’re passionate about building careers and skills by giving people access to new and diverse opportunities. If you don’t tick all the boxes above but have a solid IT background, a curious mindset, a passion for learning and adaptable skills to bring to the role, we still want to hear from you!

What’s in it for you

• Health & Wellbeing: Private medical insurance with option to add your family, Digital GP appointments, market‑leading family policies, mental health support, discounted gym memberships, dental insurance, and more.
• Spend & Save: Annual bonus scheme split between personal and business objectives, recognition with reward platform, up to 7% matched pension contributions, 15% Ocado discount, 20% M&S discount, free breakfast every day in the office, electric vehicle leasing scheme, and free shuttle bus from Hatfield station to the office.
• Never miss the moments that matter: Hybrid working, 26 days holiday plus 8 flexible bank holidays, options to buy extra holiday, 2 weeks work from anywhere, and lifestyle break opportunities.

Our Hiring Process

Lucky for us, we receive a high volume of applications and genuinely appreciate the time and effort invested by every candidate. To ensure a fair and thorough process, every application is reviewed by a member of our team. If your skills and experience are a strong match, a Talent Partner will contact you to discuss the role and guide you through the next steps of our hiring process.

Your Application and AI

In the spirit of innovation, we welcome you to use AI tools in your application, just as we use them in our own business at Ocado Retail. However, as you leverage this technology, please don’t lose sight of the most important element: your unique self. Your experiences, passions, and personality are what truly set you apart. Ensure that your application still authentically conveys who you are and why you’re a great fit for us.

Everyone’s welcome

We’re an equal opportunities employer, which means that we make sure all potential colleagues are treated fairly and equally. We want to ensure everyone has a fair chance to apply; if you need this job description in an alternative format (e.g., larger print, different document type, etc.), please reach out to us at careers@ocadoretail.com and we’ll be happy to assist you, and if you require reasonable adjustments during the recruitment process, please let us know on the application form.