ICT Risk Specialist in Cardiff

Are you passionate about technology risk, operational resilience, and helping shape a strong risk culture in a fast-evolving regulatory environment?

We're looking for an ICT Risk Specialist to join our Risk team in Cardiff or Redhill. In this role, you'll support the delivery of our ICT Operational Risk Management framework, working closely with IT, business stakeholders, and risk teams to strengthen ICT and information security risk oversight across the organisation. You'll play a key role in supporting governance, reporting, third-party risk oversight, operational resilience activities, and emerging technology risk areas such as AI and Shadow IT.

What you'll be doing

• Supporting ICT governance forums, committees, and regulatory reporting activities.
• Preparing and validating risk reporting for senior management, shareholders, and regulators.
• Monitoring ICT risk KPIs, KRIs, and risk appetite metrics.
• Executing 2nd Line of Defence (2LoD) ICT risk testing, challenge, and oversight activities.
• Reviewing controls, identifying risk weaknesses, and monitoring remediation actions.
• Supporting risk assessments across projects, operational activities, and third-party arrangements.
• Providing oversight and challenge of ICT outsourcing and supplier risk management activities.
• Supporting operational resilience initiatives and DORA-related activities.
• Analysing ICT incidents, reviewing root causes, and challenging action plans.
• Helping maintain oversight of emerging technology risks, including AI and Shadow IT solutions.
• Contributing to the ongoing development and enhancement of the ICT Risk Management Framework.

Who we're looking for

• A degree or equivalent qualification in a relevant subject such as Finance, Economics, Mathematics, Operational Research, or a related discipline.
• Experience or exposure to ICT Risk, Information Security, Operational Risk, Controls Testing, or Risk Management.
• Understanding of ICT risk frameworks, outsourcing risk, operational resilience, or regulatory requirements such as DORA.
• Strong data analysis and reporting skills.
• Experience using tools such as Power BI, Excel (including Power Query), Cognos, Microsoft 365, or similar reporting and collaboration platforms.
• Excellent stakeholder engagement and communication skills.
• The ability to work independently while collaborating effectively across multiple teams and cultures.
• Professional qualifications such as CISSP, CISM, CRISC, CISA, IIA, or CIA would be advantageous.
• Develop your expertise in ICT Risk, Information Security, Operational Resilience, and Regulatory Risk Management.
• Work closely with senior stakeholders across Risk, IT, Compliance, and Internal Audit.
• Gain exposure to key regulatory initiatives including DORA and outsourcing governance.
• Play a role in shaping how emerging technologies such as AI are governed and managed.
• Benefit from clear development opportunities, with progression into ORM ICT Risk Senior Specialist or broader senior risk roles.

People are the driving force of our business; we want to work with the best to continue to be amazing.

We have a range of opportunities within this role and the wider business to help you grow. From our Diversity Squad, Women of Stellantis Network, Employee Forum or becoming an Engagement Champion in your department, there is something for everyone to get involved with and help shape our company.

#J-18808-Ljbffr