ICT Risk Specialist in Cardiff

Company Overview

Stellantis is a leading global automaker and mobility provider that offers clean, connected, affordable, and safe mobility solutions.

Our Company’s strength lies in the breadth of our iconic brand portfolio, the diversity and passion of our people, and our deep roots in the communities in which we operate.

Our ambitious electrification and software strategies and the creation of an innovative ecosystem of strategic, game-changing partnerships are driving our transformation to a sustainable mobility tech company.

The driving force behind us is the diverse and talented group of employees around the world who bring their passion and experience to their work every day.

And while we are a truly global organization, we remain deeply rooted in the communities in which we operate and where our colleagues live and work.

With industrial operations in nearly 30 countries, Stellantis could consistently exceed the evolving needs and expectations of consumers in more than 130 markets, while creating superior value for all stakeholders.

Job Overview

Are you passionate about technology risk, operational resilience, and helping shape a strong risk culture in a fast-evolving regulatory environment?

We're looking for an ICT Risk Specialist to join our Risk team in Cardiff or Redhill.

In this role, you'll support the delivery of our ICT Operational Risk Management framework, working closely with IT, business stakeholders, and risk teams to strengthen ICT and information security risk oversight across the organisation.

You'll play a key role in supporting governance, reporting, third-party risk oversight, operational resilience activities, and emerging technology risk areas such as AI and Shadow IT.

What you'll be doing As an ICT Risk Specialist, you'll support a wide range of operational risk management activities, including:

• Supporting ICT governance forums, committees, and regulatory reporting activities.
• Preparing and validating risk reporting for senior management, shareholders, and regulators.
• Monitoring ICT risk KPIs, KRIs, and risk appetite metrics.
• Executing 2nd Line of Defence (2Lo D) ICT risk testing, challenge, and oversight activities.
• Reviewing controls, identifying risk weaknesses, and monitoring remediation actions.
• Supporting risk assessments across projects, operational activities, and third-party arrangements.
• Providing oversight and challenge of ICT outsourcing and supplier risk management activities.
• Supporting operational resilience initiatives and DORA-related activities.
• Analysing ICT incidents, reviewing root causes, and challenging action plans.
• Helping maintain oversight of emerging technology risks, including AI and Shadow IT solutions.
• Contributing to the ongoing development and enhancement of the ICT Risk Management Framework.

Who we're looking for This role would suit someone with a strong analytical mindset who enjoys working collaboratively across technical and business teams.

You'll ideally have

• A degree or equivalent qualification in a relevant subject such as Finance, Economics, Mathematics, Operational Research, or a related discipline.
• Experience or exposure to ICT Risk, Information Security, Operational Risk, Controls Testing, or Risk Management.
• Understanding of ICT risk frameworks, outsourcing risk, operational resilience, or regulatory requirements such as DORA.
• Strong data analysis and reporting skills.
• Experience using tools such as Power BI, Excel (including Power Query), Cognos, Microsoft 365, or similar reporting and collaboration platforms.
• Excellent stakeholder engagement and communication skills.
• The ability to work independently while collaborating effectively across multiple teams and cultures.
• Professional qualifications such as CISSP, CISM, CRISC, CISA, IIA, or CIA would be advantageous.

Why join us?

• Develop your expertise in ICT Risk, Information Security, Operational Resilience, and Regulatory Risk Management.
• Work closely with senior stakeholders across Risk, IT, Compliance, and Internal Audit.
• Gain exposure to key regulatory initiatives including DORA and outsourcing governance.
• Play a role in shaping how emerging technologies such as AI are governed and managed.
• Benefit from clear development opportunities, with progression into ORM ICT Risk Senior Specialist or broader senior risk roles.

People are the driving force of our business; we want to work with the best to continue to be amazing.

We have a range of opportunities within this role and the wider business to help you grow.

From our Diversity Squad, Women of Stellantis Network, Employee Forum or becoming an Engagement Champion in your department, there is something for everyone to get involved with and help shape our company.

At Stellantis, we assess candidates based on qualifications, merit and business needs.

We welcome applications from people of all gender identities, age, ethnicity, nationality, religion, sexual orientation, and disability.

Diverse teams will allow us to better meet the evolving needs of our customers and care for our future.